why would a token a) last forever, and b) not be created as a response by your smart ID card to a challenge token?