don't return GSS_S_CREDENTIALS_EXPIRED if no expiry time