I hack, therefore I am

[waider]

Turns out that the Emacs lj Client simply doesn't know any security modes except public and private, and if you don't specify private it assumes public. Bad client! No cookie!