Impersonating
The real password is unchanged. This temporary credential expires automatically.

Expires at — works for any LDAP-backed service.