add minutes in UI next to token lifetime
handle errors better for x509 keys that are no longer valid