 with clients
        that assume that the server will cache the authenticated user. However
        there will also be the performance cost of creating and GC'ing the
        session. For an alternative solution see
        <code>noKeepAliveUserAgents</code>. If not set, the default value of
        <code>false</code> will be used.</p>
      </td></tr><tr><td><code class="attributeName">cache</code></td><td>
        <p>Should we cache authenticated Principals if the request is part of an
        HTTP sessi