Description of problem: You should default to not save for the session and only for this session buttons. Administrators should be forced to click retain for the session and turn off only for this session. That way clicking the ok button is not insecure by default.
*** This bug has been marked as a duplicate of bug 470329 ***