Specified sender delegation has expired

Thanks for the hint! I saw it too (notably here) but, was confused about the documentation.

The Identity Identity frontend is free to set an earlier expiry time, but should not create a larger.

It should not be larger than?