This is troublesome as if you're saving them as globals outside of the request scope what's preventing leakage across requests between users?