Validate mutable session settings against allowed transitions
Validate mutable session settings against their reserved allowlist, while checking session identity and authorization scope as immutable. Comparing every runtime field to the initial allocation can make an allowed change succeed and then break the next status read, message, recon…