Ninety seconds. Four places the product refuses — server-side, on the identity in the token, not arranged for a demo.