I don't know if this is working as designed or if there is something wrong.
Block Cracking is installed on a couple of servers.

On one server in /var/spool/exim these files are present:
-rw------- 1 mail mail 0 2017-08-02 13:33 blocked_authenticated_users
-rw------- 1 mail mail 0 2018-03-06 00:54 blocked_script_paths

The blocked_script_paths was originally from 2015 and had a path content of something which wasn't present already for a long time.

However, 2 other servers with Block Cracking installed, do not have these files in this directory.

1.) Will these files only be created when one of them gets content? Or why are they not present?
2.) Since the content was from a longer time ago, are these paths or blocked authenticated users automatically removed at some point?