If a command invokes another command internally (e.g. through DBDirectClient), the AuthorizationContract in the current AuthorizationSessionImpl will be reset when the SEP initiates the internal command, and the existing checks that were performed for the outer command will no longer be verified against the contract when the outer command finishes execution.