Yes.

Token expiry seems favourite from my layman's perspective.