External project access should expire automatically unless renewed through an authorized process. Which design most directly supports this?

1. A shorter DNS TTL
2. Permanent assignments with no owner
3. Time-bound access-package assignments with appropriate extension and review policies
4. A VM shutdown schedule