pub fn mark_expired_session_entries(now: u64) -> Result<usize>
Retire expired managed access keys and return the number changed.