A Docker registry login succeeds and image pulls still return 401

A private registry sits behind a proxy and operators can log in successfully but certain pull paths still bounce with 401 errors.