insert into secd.session (
       identity_id
       , secret_hash
       , created_at
       , expired_at
       , revoked_at
) values (
         (select identity_id from secd.identity where identity_public_id = $1)
       , $2
       , $3
       , $4
       , $5
) on conflict (secret_hash) do update
  set revoked_at = excluded.revoked_at;
--
