Default expiration now four hours; ec2mfa checks cache status