It is unclear what the root cause of the linked BF is. We should dump some information (e.g. about client, session existence, and checkAuthForInternalClient()) in enforceRequireAPIVersion, and this would give us a better idea of what the root cause is. We would use a low debug level + failure case only.