-record(auth_defaults, { provider_module :: binary(), session_ttl_minutes :: integer(), mfa_required :: boolean(), passkeys_required :: boolean(), password_min_length :: integer() }).