Access TTL patterns that work

Guest QR lasts hours, contractors last days with Friday revocation, staff keep longer grants with audit. One-shot codes stop sticky-note password habits.