This is expected behavior for responses over a few hundred bytes when using the 10G interface(s). If you need to ensure *** characters only you can enable MD5 ever 1 request.