My actual implementation is public, because I close my sessions early with session_write_close() to reduce session lock contention, so no problem.