1.4-rc1 TACACS+ extra calls

General questions
1

Hi Team!
We’re still on 1.4-rc1 and using AAA with TACACS. The problem is that we see some extra calls from different users at our Cisco ISE.
These calls are from the box from different users with names equal to different internal proccesses, e.g:

image
image1091×210 25.1 KB

I can guarantee, that nobody is logging to the box during the time of such calls

Is it bug or expected behavior?
I’ve thought, that this is related to ⚓ T5577 Optimize PAM configs for RADIUS/TACACS+ , but looks like fix pull request had been done before 1.4-rc1 was released.