Revoke the right to set the portal id (aka label) when it is not needed anymore. Otherwise everybody in the system having a mapping of the portal can reset the label to something we don't expect. Issue #667