acl-plugin: store sessions in a single hash table instead of a per-interface