Which Security Gateway R71 configuration setting forces the Client Authentication authorization time-out to refresh, each time a new user is authenticated?

Which Security Gateway R71 configuration setting forces the Client Authentication authorization time-out to refresh, each time a new user is authenticated? The:

A.
Global Properties > Authentication parameters, adjusted to allow for Regular Client Refreshment

B.
Time properties, adjusted on the user objects for each user, in the source of the Client Authentication rule

C.
IPS > Application Intelligence > Client Authentication > Refresh User Timeout option enabled

D.
Refreshable Timeout setting, in the Limits tab of the Client Authentication Action Properties screen