Took a closer look at TFM :) I think I know why there are session files
almost a week old still lying around. The gc apparently only gets
kicked off on a 0.01 probability, based on default settings. And my
site haven't got that high a hit rate yet to trigger it often enough.