When you use the open source registry with the S3 storage driver and Cloudfront middleware, what is the expiration time for signed cookies and signed URLs? Is the expiration time configurable, or is it hard-coded? My quick glance at the source code suggests it might be hard-coded at 20 minutes, but I’m not sure.