only validate expiry when both are set