Let user specify access token TTL at create time #8147
Description
Enforce max TTL that may be configured at the silo level (see #7475). Expiration time cannot be changed after it is set. I think we want to allow the user to leave the TTL field blank in order to automatically get the max TTL (or none, if the silo doesn't specify).