Trusted Device Policy
After this many days, users must complete email-code verification again. Maximum 60 days.
Available placeholders: {tenant_name}, {tenant_slug}, {user_email}, {manual_code}, {enrollment_url}, {expires_at}.