Merge "Clarify security level default in openSession()"