Note - This is depreciated There is now an expiry available for custom postures, check the Just In Time docs https://tailscale.com/kb/1443/just-in-time-access

These are the ingredients for a simple mechanism to grant temporary access based on a manual change to a custom posture attribute