Default value of 10 days is too long in some market

[bigludo7]

Problem description
10 days is a bit too much for some legal officiers and for example in France in my company the DPO request was to reduce to 7.
So I have a trouble with a default max age that will trigger an error

Possible evolution

• Reduce the maxAge to a smaller value? 7? 3?

Alternative solution

• Remove the default value but I'm absolutely not fan of this as it is a breaking change

Additional context

[yyeAduna]

Smaller maxAge makes sense. It will reduce false positive rate significantly. When it is used for bank fraud prevention, the FIs are usually willing to sacrifice the detection rate to lower false positive rate. 4 (or 8) seem to be a good default number based on my experience that keeps a good balance between those two Key Performance Measurements.