When a new token is generated with the POST /api/v1/user/{username}/start_enrollment endpoint we should add a new optional argument to specify how long the token should be valid for.

Currently all enrollment tokens are valid for 24h.