It's a one-use token.  As it stands, it doesn't expire except on use... but expiring these tokens is a feature request from IlliniCloud, so we'll have updates to that subsystem too down the line.