Fix unsealing without extended session security