set expiry in policy to 5 minutes from now, in UTC