After merging 45492, update-policy local is now restricted to updates
from local addresses that are signed by the local session key; previously
only the session key was checked.

This change was backported to 9.9 through 9.11 but support has asked for
additional logging and/or documentation so users aren't taken by surprise.