`runtime.avatar_store` is used by many request handlers. Using it here would mess up with their transaction boundary, as flash message recording/retrieving is part of request handling. We should probably use a separate private connection here.