Looks like I'll be going with option #1, putty around the cord as it enters the conduit. I took off the light and shot a video with my go pro to better see in the niche. It looked like the previous owner had previously puttied it. Rather than scrape off the old putty, I'll just putty around and on it. Then, redo the dye test to make sure I sealed it.