@lmacken tells me that there's a new encrypted session factory in future releases of pyramid that we should use.

I don't think its available for the version we have in epel6 yet, so I'll file a ticket to remind us to switch over to using it in the future.   #252.