in app.go [211:213]
func (app *App) credentialsExpired(expiryTime time.Time) bool { return app.clock.Now().After(expiryTime.Add(-app.config.RefreshBeforeExpiry)) }