An egress-deny policy passes init checks and later leaks telemetry

The pod looked restricted during init, yet the sidecar changed the outbound path after the original deny attachment point was chosen.