pub fn expire_token_deadline(
now_ms: i64,
period_ms: i64,
current_expiry_ms: i64,
max_timestamp_ms: i64,
) -> TokenExpireDecisionExpand description
Select deletion or a bounded expiry update.
Matches DelegationTokenControlManager.expireDelegationToken in Kafka
trunk: every negative period deletes the token, whatever its deadlines.
Otherwise a token whose expiry or maximum timestamp is strictly before
now is Expired, and a live token gets now + period, saturated at
i64::MAX and capped at its maximum timestamp.