don't limit impersonated sessions