pep3 fits for issue #8
current API requires caller to set expiration date