diff --git a/server/keystore.go b/server/keystore.go
index 39ce5ee28f55660acde33bed925f29ca615d6e61..b43677aaba8970b43345269eca7a5e69035412d3 100644
--- a/server/keystore.go
+++ b/server/keystore.go
@@ -117,6 +117,7 @@ func (s *KeyStore) expire() {
 		s.mx.Lock()
 		for u, k := range s.userKeys {
 			if k.expiry.Before(t) {
+				log.Printf("forgetting key for %s", u)
 				wipeBytes(k.pkey)
 				delete(s.userKeys, u)
 			}
diff --git a/server/server.go b/server/server.go
index 1777311abe0870596986303bbe4d8f55d68957ab..681ca4816d126f2f0e01a0092d4c8b0fa99201a2 100644
--- a/server/server.go
+++ b/server/server.go
@@ -28,7 +28,7 @@ func (s *keyStoreServer) handleOpen(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
-	log.Printf("decrypted key for %s", req.Username)
+	log.Printf("decrypted key for %s, ttl=%d", req.Username, req.TTL)
 	serverutil.EncodeJSONResponse(w, &emptyResponse)
 }