Thats exactly it. An admin variable timeout is a nice touch, combine that with the Logout Redirection (of Theme My Login) and you have the ultimate idle timeout security.
In fact, if you are able to force a refresh, that would be one better than any of the other similar plugins I've seen which rely on the next user to try to move to a new page to detect the timeout.
Retiring the session and whatever else might be required so that someone new can't just "Back" into the old user session. That might involve being able to forcefully disable the "Remember Me" setting as well (I use another plugin to force no Remember Me function.
Thank you! You're the one doing all the work! But my clients will be pleased as they currently love the cell confirmed login and as their webmaster I really appreciate the constant site checking and automated updates. Keeping me busy doing updates! ;-)
Wayne