Others have reported this on the Mason list. Passing the blessed session object like this seems to make it not go out of scope, which breaks the lock behavior of Apache::Session. The reason is not clear yet.