Do you plan to add support for refresh tokens (that do not expire or maybe expire after a long time) which we can use to generate new short lived JWT ?
Asking the user for their password every day or even every week is a bad user experience and difficult to handle background tasks like checking for plugin updates etc.