- allow timeouts for MFA posture checks - allow wake/unlocked MFA options - allow legacy toggle for SDKs that don't supply endpoint state - supply timeouts on posture checks - posture data now caches session state