I dunno, I get how you expect the behavior, but I don't get how that's actually suppose to happen.

Rancher, the upstream cluster, doesn't pull in or sync objects from the downstream cluster.

It injects credentials ans polls the downstream APIs... but that's not the same thing as storing them.