key-expiration check always returns exitcode 0
found with scan-build