@protonprivacy Is setting an expiration time mandatory?