A symlinked TLS pin file makes the cloud gateway refuse outright rather than retry.
What's wrong with this entry?
If the credentials file holding the cloud gateway's TLS pin is a symlink, the connection is refused outright and not retried. An unreadable pin is now reported as its own separate failure.
- Two distinct error kinds:
gateway_pin_refusedfor the symlink case,gateway_pin_unreadablefor a pin that cannot be read. - The symlink refusal suppresses retry; nothing turns this check off.
Cloud gateway TLS pin is in a symlinked credentials file
Strings lifted out of the shipped bundle, so the claim above can be checked against them.