It currently uses the bitset filter cache, which doesn't evict on purpose, while the cache of live docs for document-level security should evict to keep memory under control.