Add support for expiring CredentialDelegation