Download of docker tags from hosted repository can fail with 400 response

Upload an image to a hosted docker repository that has its deployment policy set to disallow overwrites.  This works fine.

Now attempt to download the tag of the recently uploaded image.  This will fail with a 400 response. The log shows the warning:

2020-08-24 13:07:42,301-0400 WARN [qtp608516739-82642] EnterprisePrimaryNode_1 nexusadmin org.sonatype.nexus.repository.docker.internal.V2Handlers - Error: GET /v2/pipeline/python-webapp/manifests/3.0.10: 400 - Repository does not allow updating assets: docker-hosted

Expected: Download of an asset should not cause the deployment policy to be evaluated.

Temporary workaround (until this is fixed)... set the deployment policy of the repository to allow redeploys.