This read-write object, in seconds within a 1-to-1800 range, sets how long before its Traffic Encryption Key (TEK) expires the Radio Slave should begin requesting a new one, and like cwrBpiRsAuthGraceTime it cannot be changed while the authorization state machine is running. The desc again cautions that production installations should never set this below the 300-second standards floor, with the extended range intended only to facilitate testing. For example, an admin configuring a new subscriber radio for production use would leave cwrBpiRsTEKGraceTime at or above 300 seconds rather than using a lab-testing value.