fn sweep(now: OffsetDateTime)Expand description
Drops every entry filled more than KEEP before now, and forgets
the slots of threads that have ended.
Run on a miss rather than on every call: a miss has just paid to build a Cedar request, so one lock per live thread beside it is not measurable.