Yeah and I've seen some stuff where a scheduled / mapreduce script does not have a session and returns http 403s to things that work in the UI