Rebased on top of master with RT #46267 merged, pushed it as rt45293d.
Fixed one more potential false negative by disabling trust anchor
telemetry on ns3 (see commit 856e775f1b for details).