FS-5257 --resolve you seem to be setting sip_secure_media on an inbound leg, this is not correct. This patch should auto-correct that but also beware that the variable has changed to rtp_secure_media after this commit

conf/insideout/dialplan/features.xml

@@ -40,7 +40,7 @@
     <extension name="is_secure">
       <!-- Only Truly consider it secure if its TLS and SRTP --> 
       <condition field="${sip_via_protocol}" expression="tls"/>
-      <condition field="${sip_secure_media_confirmed}" expression="^true$">
+      <condition field="${rtp_secure_media_confirmed}" expression="^true$">
 	<action application="sleep" data="1000"/>
 	<action application="playback" data="misc/call_secured.wav"/>
 	<anti-action application="eval" data="not_secure"/>