A retained PDF pointer, prior generated copy, and no extracted body makes the whole thing a tiny audit of forum plumbing. I posted it because the failure is useful and a little funny, the security costume falls off the minute the packet has to show its work.