Check nbf/exp by default

If no validation rule were given, a default validation rule that will check nbf and exp will apply.