PreAuthenticatedSession not cleaning up

Hello,
we detected a weird behaviour in connection binding using version 4.3 with bosh.

Whenever we enable bosh there is a huge discrepancy between the number of preAuthenticatedConnections and actual bind sessions and the preAuthenticatedConnections in LocalSessionManager concurrent hashmap keeps growing and it’s never cleaned up. It seems that those connections are not removed whenever the authentication is successful.

Would it be safe to have a task that cleans up those connections if those are older than a given thereshold?

Thanks