web sessions list shows each unexpired browser session as the first twelve hex digits of its stored hash with creation and expiry; web sessions revoke <id> ends one, --all ends every one. SSH-only, scoped to the caller.
Bottom of the v1.7.0 stack.
Closes #83