fix: handling of tokens revoked before expiration (#134)