Non-admin users can create access tokens with 0 (unlimited) expiry [RTFACT-16460]