Enable Expiry when creating secrets in the key vault

Some of the secrets Nerdio creates in the key vault do not have an expiry date set. This can cause issues with compliance and security checks in some environments. It would be good to have an option to create a secret expiry date when these settings are configured, e.g. AD Profile domain join settings. The requirement would be: 

1. While adding /creating any settings in Nerdio Enterprise Manager and it tries to write in Key vault, it should prompt for setting-up secret expiry timelines (e.g. no expiration, no of years, custom date etc.)   
2. If the expiration date is about to reach, it should notify 1 month ahead of time, via email to update secret expiration and also prompt in Nerdio Enterprise manager to update the secret expiration date (with drop down to select the new expiration date).