When one does "gcloud auth login", the credentials are stored on the local system.
Is there a way to set a policy on an organisation in GCP that will ensure all credentials will be time-limited, so that users need to reauthenticate regularly?
My main concern is that these credential files may fall into the wrong hands, i.e. if a developer's laptop is stolen, or a roommate may access a developer's laptop. Time limiting the validity of these tokens will limit the damage somewhat.
I know users can do "gcloud auth revoke", or go to https://myaccount.google.com/permissions an revoke Google Cloud SDK permissions there, but both are manual processes.