Expiring URLs for embeds?

I’m interested in generating expiring urls.

I noticed this in the reference app:
“Signed embeds can also be set to have an expiration time, which further improves security.”

Is there an example or documentation covering the expiration time for embed urls?

Is this a JSON Web Token thing vs. a Metabase API thing? I think maybe “yes”