Found while debugging #1870. Signed-off-by: David Anderson <danderson@tailscale.com> (cherry picked from commit 5bd38b10b49ec6446560d0da3ce67beaed69f68e)