su-apiserver session handling