Comment by tayiorrobinson

and also requires you to relogin every so often (to be fair it's 90 days not 24h)

and you can just use a custom OIDC IDP with tailscale, for all 15 of us that have custom OIDC IDPs