We should make it clear that if one relies on the session files to be stored in the default directory managed by PHP, the other session expiration related options may not work as expected if other applications that write to the same directory have short max lifetime settings.

see symfony/recipes#209 and symfony/symfony-standard#904 (comment)