Creating a session does not need higher privileges now. Creating of TRUSTED sessions works (but not in an XPage thread - didn't figure out why it is blocked there - you can still run a xots tasklet with a trusted session)