@tendstofortytwo now that you say it I do already use OAuth for connecting GitHub Actions to my Tailnet and never stopped to wonder why that doesn't need renewal :blobFacePalm:

Thanks for the tip!