Using > meshtastic --dest !abcd1234 --set security.is_managed true to enable managed mode over the air results in NO_CHANNEL errors and losing PKI admin access.
Using local serial does not cause this.
I think this is due to not being able to read out the existing security configs over the air, causing a blank security section to get written back to the node (other than security.is_managed), resulting in the admin keys getting wiped out.