With regard to Point 2; I understand that the whole point of having the 24hr quarantine is to stop the swift re-use of CALs. If it were possible you could get away with only having a fraction of CALs to support a wide user base which of course equals less licence revenue for Qliktech.
As for Point 1 it could be due to the fact that you have 'Dynamic CAL Assignment' checked in the General Server Settings or the User has been manually assigned a Named CAL. As far as I remmeber the way Qlikview Server works when checking CALs is first to check if the User is Named, if not it then tries to assign a Named CAL if its allowed if not it cascades down to Doc CALs. If you remove the Dynamic CAL assignment that should sort it.
Note - this isn't the 'Allow Dynamic CAL Assignment' chceckbox under the CAL tab for individual .qvw's.
Hope that helps,
Matt - Visual Analytics Ltd