Allow revoked_at to be set in the future, for future expiry