It could be interesting to make a local copy on server side of the sptlrpc llog, so that the targets that do not manage to connect to the MGS know at least which security flavor to accept from clients.