fix overly restrictive secondary user INTERNET

static/releases.html

@@ -422,6 +422,7 @@
 
                     <ul>
                         <li>Settings: add 3rd option to connectivity check setting for disabling it (will prevent falling back to other networks from a broken one and handling captive portals)</li>
+                        <li>further fixes for the upstream code implementing the eBPF-based INTERNET permission (fixes cases where it was overly restrictive for secondary users, but we already prevented it from being overly permissive by adding back the simpler pre-eBPF approach as a 2nd layer of enforcement)</li>
                     </ul>
                 </article>
                 -->