Fixes for cert name locking, session cache validity, hostname log sanitization, and build/CI hardening