Old authentications now live for a day. Conditional destroy of AuthenticationShadow.