We still need to persist the lockout time to the keychain.  It needs to be available to the app in use cases where the identity data is not retrieved.  For instance, if you've already authenticated, then you kill and restart the app, you'll be in a scenario where the identity data is not retrieved, but you still need to know the lockout time.