hardening: inactivity timeout settings: revamp