keep track of when the credentials expire in henry's scope