don't expire token if read access remains