pub fn approval_credential_expires_at( credential: &str, ) -> Result<String, String>
Extract the credential expiry timestamp from an approval credential payload.