code: func (u *UserV2) Expiry() time.Time {
  	if u.Metadata.Expires != nil && !u.Metadata.Expires.IsZero() {
  		return *u.Metadata.Expires
  	}
  	return u.Spec.Expires
  }
docs: // Expiry returns expiry time for temporary users. Prefer expires from
  // metadata, if it does not exist, fall back to expires in spec.