this is actually the behavior that I found on the command line as well - it is ok since there is no scope during the second phase of apply (or when on an agent).