Vault: Add cache expiration feature

---

Migrated from T745 (view on Phabricator)