clock skew is configurable
check for key/obj != NULL
doc cleanup