SessionRefCipher: do more assertions about cache key format.