Configurable lock duration for session