add optional minimum expiration to getCredential, better handling of returns in slice...