Suricata

Is the only problem the fact that we can use -S ?

see

 if (!sig_file_exclusive && de_ctx->firewall_rule_file_exclusive) {

Philippe Antoine wrote in #note-4:

Is the only problem the fact that we can use -S ?

see
[...]

No idea. I spent some time trying to understand what I meant here but either I tested it wrong or it happened in a special combination of config and cmdline options. But, for now, I'm unable to reproduce this and what I've written here seems impossible by looking at the code.
Should have done a better job at ticket description.