Yeah and would passkeys themselves prevent the session from expiring? Notion et al can still have short lived sessions on their client apps.