Doc's mention about expiration time is precisely that server's code is
supposed to do just that internally.