Hi John,
Thanks for asking.
Piers McMurdock asked a very similar question back in May this year https://totara.community/mod/forum/discuss.php?d=16404
The short answer the behaviour your are observing is both correct and intentional. It has been done that way for security.
Have a read of the above thread and if you've any questions still please ask them here, I'll be happy to answer them.
Kind regards
Sam