Just sounding off that I've run into the same problem. I've been digging a little in my spare time, but don't have anything useful to add. The behavior occurs with a fresh OpenACS 3.2.4 install and still occurs even with the latest sourceforge /tcl/ad-security.tcl
