Implement role-based credential expiry