Async XML tasks should not set security context, just get it.