@lassesuom my guess is they're sess:* keys. They can balloon up if you have lots of guests *cough* AI scrapers.
There used to be logic so that guests didn't receive a session key (since they didn't really need one for regular browsing) but it could be that that detection no longer works.
