Thanks! Looks good, with one caveat. I see that entries for the stale connections are still appearing in system.temp.tls.httpsServer and are not going away. I'm inclined to ignore this for now.

Andrew