I keep struggling with the somewhat short timeout of 5min. If you actually work in the office with passwords everyday then 5 minutes can be very short (one has to check back or someone calls).
I think this timeout should be more flexible - for example, in my case that would be covered with 2 to 8 hours.
We checked the config/default.php (both our own and Github) but couldn’t find such tweak…