I wonder why API token has expiration time just 30 days? It seems too short for me. E.g. Amazon have token without expiration (AFAIK). Fedora koji cert is valid for one year. Can we have expiration time longer? E.g. one year? Objections? Mirek