Rolling expiring signatures