Suricata

Pushing forward. I think this needed more discussion. It only was a blocking issue in strict mode, which is probably ideal. But worth leaving open for consideration if we do another change like this in a backport.