Which Security Gateway R77 configuration setting forces the Client Authentication authorization time-out to refresh, each time a new user is authenticated?

Which Security Gateway R77 configuration setting forces the Client Authentication authorization
time-out to refresh, each time a new user is authenticated? The:

A.
Time properties, adjusted on the user objects for each user, in the Client Authentication rule
Source.
B. IPS > Application Intelligence > Client Authentication > Refresh User Timeout option enabled.

C.
Refreshable Timeout setting, in Client Authentication Action Properties > Limits.

D.
Global Properties > Authentication parameters, adjusted to allow for Regular Client
Refreshment.