cfircohen Pass zero expiration value to PolicySecret