authn flow timeout and lifetime via predicate

[Cantor, Scott]

There isn't any way to establish those settings dynamically. Rather, it's possible to attach a predicate to the flow as a reuseCondition (there are properties for each login flow in 4.1+ to get the bean ID set) , and that can be added as another layer of validation that can enforce timeouts and such more dynamically.

The MFA flow should honor the condition automatically if it's attached to a flow it's running.

-- Scott