All right, I got an answer from Collabora and they confirmed that it is a bug on their side. They indeed wanted to check creds on the accepted socket, not the listening one. So, unless I am missing something, I think it is good to have FreeBSD error out in this case.