package-server: remove cache entry when expired