A policy exception expires while the affected application is still running. What should happen?

1. Assume the application's uptime renews the exception
2. Review or remove the exception through its accountable process
3. Copy the exception to every new namespace
4. Automatically disable all cluster audit logging