Awesome, thanks for the additional details! I don't consider security issues like that stupid, in fact as seen in this situation, they are at times very complex and a number of items have to be taken into account. It's easy to miss a step or a route when getting all of the various points setup, especially when using many products to secure various aspects. I know from personal experience that sometimes documentation is lacking (or impossible to document all various aspects) on how things might work when other things are setup/configured a certain way.
Thanks again for the additional details I'm sure someone else may come across a similar issue like this in the future setups!