cryptodev: clarify when session can be cleared