In SaltStack Salt before 3002.5, eauth tokens can be used once after expiration. (They might be used to run command against the salt master or minions.)
https://github.com/saltstack/salt/releases
https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html
https://security.gentoo.org/glsa/202103-01