>FWIW I read that doing things like adding options to DropDownLists in client code can trigger the "Invalid Callback" exception.....

In the page it happened, it was in the password recovery page and this has no DropDownList control.

I will however add a static machine key and see if this will resolve the issue.