When the SQL Clone server is updated to a new version, all the connected agents will initiate an update as well automatically.

This process happens in the background but in order to complete successfully the new agent version needs to access the credentials from the older running one.

This can be incorrectly flagged as a Local Security Authority(LSA) issue by some security audit tools.