Make `expires_at` return Time, not num of seconds
Add default (missing) :client_options

This fixes `NoMethodError - undefined method `ca_path' for nil:NilClass:` error when no :ssl options are defined.