- it appears TOS system variables aren't protected (at least the Cookie Jar can be read from user mode)