* docs: make clear that any access token expiry dates are ignored * clarify why access-token expiration cannot be validated --------- Co-authored-by: Jan Larwig <jan@larwig.com>