I think this public setter (and some of the others that preceded it) are only safe to call from within the Site thread. The Site class is not re-entrant if I remember correctly? Might be a worthwhile assertion or permissions change to enforce that? I think the code I wrote would benefit from this comment-of-hindsight too... :-\