AUTH_EXPIRED
as->state |= AUTH_EXPIRED; /* XXX */
as->state |= AUTH_EXPIRED;
as->state = AUTH_EXPIRED;
if (auth_getstate(as) & AUTH_EXPIRED)