The controller widened the bus's from-mesh port to from-anywhere on the broker's host so a machine could enrol before it had a tunnel. ADR 0169 has machines join through the tunnel and decides the bus is never public; every live bus connection already comes from the mesh.