Context

Session sweep revokes by age, so expired sessions linger for three years