Your organization uses Purview sensitivity labels with encryption. Legal team members frequently travel and need to open highly confidential documents while disconnected from the corporate network for up to two weeks. Security requires that if an employee leaves, access to protected content can be revoked quickly. When configuring the encryption settings on the sensitivity label, which setting directly controls the trade-off between offline access duration and how quickly revoked access takes effect?