revisit graphd session design on security perspective

[wey-gu]

initial discussion from

• https://community-chat.nebula-graph.io/t/5057975/i-was-looking-at-the-java-client-and-i-was-wondering-if-this
• https://community-chat.nebula-graph.io/t/5057978/also-though-from-a-resource-perspective-it-seems-then-i-can-

by @wdroste

@yixinglu @Aiee @xtcyclist what do you guys think?

[wey-gu]

Regarding

Also I didn’t see the ability to expire a session on the server side. If there is an anomaly or too many sessions are created it would be good to have a command to expire particular ones as well as all of them

We could highlight it here #4747 cc @MuYiYong