A transit interface was left out of passive-interface default exceptions, and a rogue OSPF adjacency forms during an access switch replacement

The underlay works until maintenance introduces a neighbor on a segment that should never have participated in routing.