Also, if you set an expiry in the policy that is attached to your catalog entry, it will expire the key on create:
