docs: def get_ticket(self, service):
          """Return an existing AuthTicket for a given service."""
          return self.auth_tickets \
              .filter(expires__gt=datetime.now(timezone.utc), service=service) \
              .last()