* Switch to "process" provider for AWS credentials (much less hacky) * Session timeout (plain duration, or activity-based?) * Fix rehide behavior when new request comes in while old one is still being resolved * Additional hotkey configuration (approve/deny at the very least) * Logging * SSH key handling