EUCA-8651: Set/enforce service-specific expiration date on VM certificate