Hey there @panda!
It’s a tough one unfortunately / fortunately for security of your system. I probably don’t have anything else than the alternatives that seem to be an overkill for you usecase. We basically recommend to force login again after max 3 days of inactivity from the user.