documented mutual exclusivity between inactivityTimeoutMinutes and sessionDurationMinutes not enforced with XValidation rule
