'Read using char UUID' in BTool always reads the value, even with GATT_PERMIT_AUTHEN_READ set and no pairing done

Hi

I am using BTool to configure my peripheral and central on a CC2540 using HostTestRelease and running BLE Stack 1.3. I have an attribute configured with GATT_PERMIT_AUTHEN_READ set to prevent reading unless pairing or bonding has been performed. When I try to read this characteristic using the "Read Characteristic Value / Descriptor" command in BTool before pairing, it returns the error INSUFFICIENT_AUTHEN, which is correct. However, when reading the same characteristic, still before pairing, but using the "Read Using Characteristic UUID", I always succeed in reading the value and no Authentication error is given. Is this a bug in the SM (my suspision) or is reading a characteristic value using UUID a dodgy way of bypassing security?

Regards

Tielman