The 'quickstart.py' script reads the expiration date from the user and saves it to 'config.cfg', along with other metadata info needed by the 'signerlib.py' module.

The user may update 'config.cfg' to assign new values for keyids, thresholds, etc.  Reading the metadata would only extract older/current values, and the user should not be editing these files directly.  

The repository tool changes will attempt a cleaner design, so I'll worry about this issue/confusion then.