Agent bakery: exception baking agents with TLS

Apart from Andreas I am also not yet able to reproduce.
Which rules need to be added to a fresh system for this issue to appear?