Private epics still visible on public issue

Summary

If I create an epic and set the security level, the issues are not visible, but any issue in this epic still shows it in the description.

Steps to Reproduce

1. Create an Epic.
2. Set the security to "Reporters and Developers"
3. Create an Issue (public).
4. Set this issue in this epic.

Expected Results

At this point, as a public user, I shouldn't see this epic anywhere. Which for the most part is correct, it doesn't show up in the agile board. The epic issue is not visible etc.

Actual Results

The epic issue is invisible expect when viewing the issue details for the issue created in step 3. This shows a lozenge for the epic issue and has a click through. The link goes to the epic's issue and the user is prompted for a login. I would have expected this to not be visible.