at authentication time, if the user has not confirmed ownership of a computer, set a shorter auth period.