I came to the conclusion that expiration time should really be a backend
property, not a frontend one.
The frontend can always decide to not obey the cache expiration time and
force an update of course. This is in fact happens as part of the midway
refresh strategy or in the pam service where we always make sure to
fetch entries from the source on login.
Simo Sorce * Red Hat, Inc * New York