DSS_FATAL_ERROR:DISCONNECT DUE TO SEC. VIOLATIONS when using a stationary object

[doublec]

I'm getting the error "DSS_FATAL_ERROR:DISCONNECT DUE TO SEC. VIOLATIONS" when running a server with a stationary object. A client calls a method on this server then the server dies. I've pasted a minimal example below. I run the 'Server.exe' program, then the Client.exe program in another shell. The first two invocations of 'Client.exe' work, but the third fails with this error. Am I doing something wrong, or am I hitting a DSS bug? This is on Linux if it matters.

Example session:

In terminal 1:

$ ozc -x Server.oz -o Server.exe
$ ./Server.exe

In terminal2:

$ ozc -x Client.oz -o Client.exe
$ ./Client.exe
$ ./Client.exe
$ ./Client.exe

Appears in terminal 1:

Hello
Server started 
Hello
Hello 
DSS_FATAL_ERROR:DISCONNECT DUE TO SEC. VIOLATIONS

-----------------Server.oz---------------------

functor
import
  Connection
  DP
  Pickle
  System
define
  class XServer
     meth hello
        {System.showInfo "Hello"}
     end
  end

  fun {NewServer Class Init}
     Object = {New Class hello}
  in
     {DP.annotate Object stationary}
     Object
  end

  S = {NewServer XServer init}
  T = {Connection.offerMany S}
  {Pickle.save T "s.pickle"}
  {System.showInfo "Server started"}
end

-----------------Server.oz---------------------

---------------Client.oz---------------------

functor
import
  Application
  Connection
  DP
  Pickle
  System
define
  S = {Connection.take {Pickle.load "s.pickle"}}
  {S hello}
  {Application.exit 0}
end

---------------Client.oz---------------------