PATs expire a year after they are generated. We should send an email to users, say, two weeks before one of their tokens expire to remind them to generate a new one.