When Automatic Ticket Renewal is on, whenever tickets (or tokens) are
near expiration (within 15 minutes) Leash will attempt to extend the
ticket lifetime either via ticket renewal or ticket importation.
If these attempts fail, Leash will display the ticket initialization
dialog. In this way, Leash ensures that there are always valid
Kerberos tickets (and AFS tokens).