Client connections to Connection Manager

I have a Connection Manager set up (along with SSL certs) and a client configured to connect w/ TLS/SSL required (finch). Connection works fine, but from the Openfire Admin Console the connection shows up without a “lock” icon (indicating encrypted).

Is this a side effect of it passing through the connection manager first?