Added support for delayed violation and provisioning enforcement

Should `$timelimit` (which comes from the configuration parameter *[maintenance.violation_maintenance_timeout]*) be converted (using `normalize_time`)?