key-expiration check always returns exitcode 0

found with scan-build