RHEL 9.0. /run/ipa/ccaches is filling with credential caches. Many are too old to be valid.

I assume it's safe to have a cron job delete any more than a day old? (that's our maxmum lifetime.) I can't see the lifetime directly, because they are encrypted.