CVE-2013-6458

Every API that is going to begin a job should do that before fetching
data from vm->def.