The authentication_duration of an ApiUser is now used to set the max_age of all its Authentications.