There's "disable key expiry" per machine in the tailscale admin panel