Depending on the underlying implementation, do not only trust the Session #1786