Currently, roles are activated for their maximum amount of time. I think that makes sense as a default, but I would also like the option to customize how long a role is active. This is especially important for highly privileged roles where I only want to be permissioned for the least amount of time possible.