adding script that shows how to parse through a tree at the subdomain level and look for 'expired' device clients and re-enables (regenerates a CIK).