this _extract_expiration method was not being used and appeared to be copy pasta from the NewSecretValidator