Entities can now be retrieved interally without authorization checks. In
this case, the entity is marked for internal use and serialization is
prohibited.