And for those bots deemed too useful to exclude, such as Google, Bing, Internet Archive, and whatever feeds into DuckDuckGo, try these in no particular order:
1. Make sure the board software is issuing a proper absolute URL in
<link rel="canonical">.
2. Hardcode their user agents into the board software as not eligible to begin a session.
3. Try
turning off session.use_trans_sid.