Constant SESSION_TIMEOUT_SECS 

const SESSION_TIMEOUT_SECS: u64 = 600;

Wall-clock cap on a single auth session. Past this, the session transitions to Failed { reason: "timeout" } and the spawned CLI (if any) is killed by the handler that owns the join handle.