Ah ok, this one was explained on IRC:
> 21:25 < jerith> The bug was that we passed the batch key into the message list methods which used them as the "show sensitive messages" arg.