Admits agents whose certificate expired within the grace window to a renew-only session; revoked devices are always refused.
You are not signed in.