Add config setting for assertion expiry