Anyone have any idea why all the tap interfaces of my instances are attaching directly to the OVS bridge br-int vs where they SHOULD be attaching... to a linux-bridge where security can be applied?

Here's an example of how it looks currently:

Bridge br-int
    fail_mode: secure
    Port "tap614bb018-7c"
        tag: 5
        Interface "tap614bb018-7c"
            type: internal
    Port "tapf6e0feef-ca"
        tag: 7
        Interface "tapf6e0feef-ca"
            type: internal

Thanks!