First HTTP authentication request on APIcast returns 403 (unauthorized) when using the "allow" authentication caching policy on Red Hat 3scale API Management

Issue

I have questions about an authentication caching policy in 3scale. I tried configuring this policy with "Allow: when the backend is down, allow everything unless seen before and denied". When a new authentication is made, the first one call is denied, but all the next are ok (with backend and management down). Is this behavior ok or there is something else?