fixed: too many flushes occuring when many activities and some flush/subtransactions
security service: don't perform flush after security modifications, but only if needed at read time