Frequent reauth doesn't make you more secure