You could try D_SECURITY:2 and/or D_FULLDEBUG instead, to try to
get more detail; you should also check the client side's log with
D_SECURITY and see what it thinks is going on. I'm not sure why you
aren't already seeing any messages about what the collector is trying to
do, though.