What's required at a minimum is actually the count of active sessions. So
- we can change this to expose only the active count
- we don't expose anything, in which case we can't really test (as in integration-test) the fix