Does shortening Teleport cert interval cut SSH latency?

The goal is to lower the observable SSH session latency introduced by Teleport’s short‑lived certificate handshake while preserving the security benefit of frequent credential rotation.

Teleport issues new TLS/SSH certificates every 60 minutes by default, and clients cache them to avoid reconnection delays. Reducing the renewal interval could increase handshake frequency and add latency, but it also shrinks the window in which a compromised certificate could be abused. The trade‑off between latency and security in a typical LAN environment has not been quantified.

What is the shortest renewal interval that yields a measurable latency reduction without weakening security? How does client‑side caching modify the latency impact of more frequent renewals? Does the latency benefit plateau after a certain interval threshold?