added a missing expiry check before returning objects retrieved from the ldap backend