3 ms·

short sessions exist to enable token revocation that does not require a central sync point (aside from time servers)