Give an approval an end date.

Approve a token the way you always do. Sign one free message here. The permission removes itself when the time comes.