do we need to document the use of $expiration as last parameter?