What about this 90 days validity limit ? Do you update it with a script ?
Haven't been on the limit yet, but i have a small bash-script which will revalidate them.
I have a TODO to revalidate once manually when it is near expiration. If the script works, i will probably throw it in a cronjob.