Sessions have a few minor initialization order issues, where different flags interact negatively or awkwardly. These aren't exactly dependent, but the testing mostly overlaps.
- PHI223: Required legalpad documents conflict with required MFA.
- T8918: Header shows number of notifications and various other controls on the 2FA auth screen
- https://discourse.phabricator-community.org/t/activation-link-in-welcome-mail-only-works-if-new-user-isnt-semi-logged-in/740/4 I haven't really evaluated this yet but it might be an adjacent issue here. This might be the same as T8335.
- I'll mention T12421/T9150 here; while I still don't really consider those to be valid use cases, they may be easy to fix.