OK... here is what I came up with:
If the time since the semaphore file was created is greater than the time since the 'desired logout time', log everyone out and recreate the semaphore file.

However, if the semaphore file does not exist, for whatever reason, create it, but don't log everyone out. This will delay the logout until the next 'desired logout time'.

Suggestions are still welcome...