1152 /* credential ttl (sec) */