bake expiration into signed message