the SRG says:

The operating system must terminate all sessions and network connections related to nonlocal maintenance when nonlocal maintenance is completed.

to satisfy it, we should investigate if oc debug can terminate (idle?) sessions. The code seems to indicate a 15 minute timeout, but at the same time, David indicated that it doesn't really work reliably.