Actually, the leaseExpiry (linked to the leaseDuration in Commons), was added to KeystoreSecretStore and HsmSecretStore
but we missed some pipes in IG as only the SecretReference(1) uses the isExpired method.
( See https://stash.forgerock.org/projects/COMMONS/repos/forgerock-commons/browse/secrets/secrets-backend-keystore/src/main/java/org/forgerock/secrets/keystore/KeyStoreSecretStore.java#302)
(1) The SecretReference checks for secret expiry: see https://stash.forgerock.org/projects/COMMONS/repos/forgerock-commons/browse/secrets/secrets-api/src/main/java/org/forgerock/secrets/SecretReference.java#106
For IG, that means actually, for 7.0, we have to hide the leaseDuration option as it cannot be used as it is.