3151: use 2-week default permission TTL

Fixes #3151.
Merge branch '3151-permission-ttl'

Closes #3151.