Test that credentials are refused when expiration extension is attempted