// Every request we have 1 chance out of 5 to regenerate the id
if (mt_rand(0, 4) === 0) {
    return session_regenerate_id(true);
}