Comment 2 for bug 1735724

This bug has a security edge (metadata requests leaking to outside / metadata responses reaching us from the outside), so I marked it accordingly. The bug will stay in public since it was reported like that in the first place.