So two things...
1. Is it expected behavior that you must log into the vSZ with the local admin account only to be able to use the CLI Session for ICX switches? Is that something that will change in a future release to work w/AAA logins?
2. Is it known/expected behavior to have to log into the leader node of a multi node cluster to have to use the CLI Session option for switches? When logged into a follower node, we get "Service Temporarily Unavailable." That seems... well dumb.