Contents:
Adds a new field to ValidationOptions named early_expiration_seconds. This will reject a token before the exp time, serves as an inverse of leeway. (early_expiration)