Authenticatable token fields can now specify an :expires_at option with
a procedure that returns an expiration date/time for the token. If the
procedure returns nil, there is no expiration.

Issue: https://gitlab.com/gitlab-org/gitlab/-/issues/30942