s3:gse: implement gensec_gse_expire_time()