--- a/server/session.py	Fri Jan 24 10:04:56 2014 +0100
+++ b/server/session.py	Mon Jan 27 16:19:49 2014 +0100
@@ -1747,7 +1747,8 @@
         self.user._cw = self # XXX remove when "vreg = user._cw.vreg" hack in entity.py is gone
         if not safe:
             self.disable_hook_categories('integrity')
-            self._cnx.ctx_count += 1
+        self.disable_hook_categories('security')
+        self._cnx.ctx_count += 1
 
     def __enter__(self):
         return self