We probably should look at common expiration times for OAuth access tokens.