CI sessions, avoid sessions created by non-humans

[eluser]moot[/eluser]
Another question:

When do expired sessions get deleted from the database?

Does the CI session library look for and erase expired sessions every time it gets initialized?

Thanks