(this is needed because it might expire while MSG2 is being decoded despite being received inside the window)