Hard-deleted when either limit is reached.
Optional. Recipients must enter this before the secret is shown.