prioritized max-age over expires (RFC6265, 5.3.2)