>> Is recording the time of the last login security relevant?

> Yes.

Interesting. Why exactly?

> Then the magic cookie resumption should also call the login hooks.

Nah, would need a different hook. The login hook transports login name and password, and the password we definitely not know at this point.