Add test reproducing the exact scenario from issue #2990 where: - One user (user1) in group:admin - node1: user device (not tagged) - node2: tagged with tag:admin, same user The test verifies that peer visibility and packet filters are correct. Updates #2990