maxSessionSeconds

Per-boot uptime cap, in seconds. 0 = unlimited. Non-zero is firmware-side enforcement: the device revokes auth and reboots after this many seconds of uptime even if the boot-count TTL is still valid.