Hi,
This is a known issue reported recently on another thread. It is fixed in the source code repository and will be fixed in the next release.
For now, a workaround is to go to the root site immediately after creating a child site. In related sites mode, every time you save site settings in the root site, it propagates the security settings to all child sites. So saving the parent site will fix the settings.
Best,
Joe