I don't think we need to bother with any real-time deletion of expired tokens.  We need to have a pruning script anyway, so no point adding extra complexity.