Currently we have a few options like: ``` SessionDuration DisableSessionExpiryRefresh MaxTokenLifetime ``` These should be in the same struct with some basic validation. Then we can pass them around as a set of corrolated configs.