[Freeipa-users] /run/ipa/ccaches filling

RHEL 9.0. /run/ipa/ccaches is filling with credential caches. Many are too old to be valid. I assume it's safe to have a cron job delete any more than a day old? (that's our maxmum lifetime.) I can't see the lifetime directly, because they are encrypted.