This script enables expiration for intelligence items.
policy/frameworks/intel/whitelist.bro
policy/frameworks/intel/do_notice.bro