Your comments

In general if there are more password in the folder it would be more usefull to set up expiration rights for the records itselves rather than for the folders. Main idea is that each record represents system or platform. Expirations request could differ from one to another. Reasons could be technical or or just process based (ISMS, etc...).