bool isExpiredAt(DateTime time) => tokenExpiration != null && !time.toUtc().isBefore(tokenExpiration!);