Thin storage wrapper for key expiration