Caused by _bonds receiving command to apply subsystem restrictions before it received the actual power-on message. Fixed by making it catch POWER_EMERGENCY.