Keeping them around is going to take up a lot of storage. If it takes more than a half hour for a client to complete the auth, make him start over.
We'll need this because user interactive auth will get complicated and messy very soon.