SSO_DEBUG should be false by default, to prevent filling /tmp with garbage.