* fix: removed dummy ID(b) from upgrade_security for inbound connections * added newsfragment * updated newsfragment