Check expiring authority after acquiring admission locks
Check time-limited authority after acquiring the locks needed for admission. A locking query may spend longer waiting than the remaining credential lifetime; an earlier successful time predicate is insufficient evidence that authority is valid when work begins. Use a database wal…