default ticket lifetime of 10h, like Kerberos