if the tokens are truly short lived, you can use caveats (https://authzed.com/docs/reference/caveats) to handle those cases