Yes, we know that, but we unified authentication for Linux / Windows and services. We don’t face any limitation (other than that one, if it’s related)
Yes, there are some DENIED lines
[ 3312.151969] audit: type=1400 audit(1644571146.193:127): apparmor="DENIED" operation="sendmsg" profile="/usr/lib/snapd/snap-confine" pid=11138 comm="snap-confine" laddr=162.38.80.54 lport=895 faddr=162.38.151.4 fport=2049 family="inet" sock_type="stream" protocol=6 requested_mask="send" denied_mask="send"