From @Bugreporter:
In T359653#9615869, @Bugreporter wrote:Another idea is expire temporary account that is inactive for some shorter time (e.g. 7 days or 30 days). But we need some way to store how temporary account is recently used (maybe just store it in cache?)