[EE] Security fix for third-party GuidedTour users