Extend watchdog timer beyond 8 seconds

DaveEvans:
What failure modes might cause the board to not be able to handle watchdog interrupts?

Any failure that occurred while interrupts were disabled, or within an interrupt handler (which amounts to the same thing).