Automation of hrm_credential.end_date based on deployment setting

one oft the most frequently re-invented wheels - make sure this doesn't become yet another instance.