[elithrar]

I'm surprised that it doesn't? gorilla/sessions[1] does the same; and you can eventually remove your old keys provided you keep your expiry times sane.

[1]: http://www.gorillatoolkit.org/pkg/sessions#NewCookieStore