We do, but there is no getter for the TGT expiration. It's defined in `TicketGrantingTicketExpirationPolicy` which has no getter for `timeToKillInSeconds`, so I had to work around that by injecting the value into a custom `TokenExpirationConfig` object that I could autowire into the `TokenServices`.