Don't assign handles to a session from an incoming packet until the packet is known to be valid.