A TCP health check passes and real clients are denied

The listener is healthy, yet the identity parser follows different branches for probes and for real users because metadata richness differs.