It's redefined as timeout-after-last-renewal. It is bw-compat by setting `reissue_time=0`, and others can increase that similar to how auth_tkt works.