Move from a clock based expiration to a simpler 'once' versus 'continous' model. 'once' is intended to be used generally, 'continuous' for stateless without benefit of TPM. The goal would be to use TPM to seal a key to avoid continuous.