I think it makes sense to parse the session duration once on startup, and store it in a time.Time (e.g. a package-level variable or a SessionPlugin member variable) so that we don't have to re-parse on every request.