def add_meta_attr(session, resource, key, value)
  stdout, stderr, retval = run_cmd(
    session, PCS, "resource", "meta", resource, key.to_s + "=" + value.to_s
  )
  return retval
end
Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions.