BUG: 258916

use stricter refing in all places of 'identity' keeping.
it is interesting that it would be much harder
to accidentaly make same mistake if G API was C++ style and not C.

i also moved cleanup of successful sessions in time from system shutdown
to session completion as polkit docs say it should be