Updating exepiration_time using the API - device control policy exception

[Vixepti]

Hello,
I am trying to update the expiration time of Device control policy exception using the API.
I try to find every exception without expiry date and set it. Getting the values and updating the expiration time is not the problem, the problem is pushing the updated setting back to crowdstrike..
I don't get any error and as I am not a developper, I must admit that I am now stuck. Any Idea?

#Requires -Version 5.1
using module @{ModuleName = 'PSFalcon'; ModuleVersion = '2.2' }
<#
.SYNOPSIS
Create a CSV containing Device Control policy info (settings, members, groups, exceptions) using id or name
.PARAMETER ClientId
OAuth2 client identifier
.PARAMETER ClientSecret
OAuth2 client secret
.PARAMETER Cloud
CrowdStrike cloud [default: 'us-1']
.PARAMETER Id
Policy identifier
.PARAMETER Name
Policy name
.PARAMETER Path
Target directory for CSV output
#>
[CmdletBinding(DefaultParameterSetName = 'Id')]
param(
  [Parameter(ParameterSetName = 'Id', Mandatory, Position = 1)]
  [Parameter(ParameterSetName = 'Name', Mandatory, Position = 1)]
  [ValidatePattern('^[a-fA-F0-9]{32}$')]
  [string]$ClientId,
  [Parameter(ParameterSetName = 'Id', Mandatory, Position = 2)]
  [Parameter(ParameterSetName = 'Name', Mandatory, Position = 2)]
  [ValidatePattern('^\w{40}$')]
  [string]$ClientSecret,
  [Parameter(ParameterSetName = 'Id', Mandatory, Position = 3)]
  [Parameter(ParameterSetName = 'Name', Mandatory, Position = 3)]
  [ValidateSet('eu-1', 'us-gov-1', 'us-1', 'us-2')]
  [string]$Cloud,
  [Parameter(Mandatory,Position=1)]
  [ValidatePattern('^[a-fA-F0-9]{32}$')]
  [string]$PolicyId,
  [Parameter(ParameterSetName = 'Name', Mandatory, Position = 5)]
  [string]$Name,
  [Parameter(ParameterSetName = 'Id', Position = 6)]
  [Parameter(ParameterSetName = 'Name', Position = 6)]
  [ValidateScript({
      if ((Test-Path $_) -eq $false) {
        throw "Cannot find path '$_' because it does not exist."
      }
      elseif ((Test-Path $_ -PathType Container) -eq $false) {
        throw "'Path' must specify a directory."
      }
      else {
        $true
      }
    })]
  [string]$Path
)

Main part of the script :

begin {
  function Write-PolicyException ([string]$String) {
    $PolicyList = Get-FalconDeviceControlPolicy -Detailed -All

    if ($PolicyList) {
      $output = foreach ($i in $PolicyList) {
        if ($i.name -eq 'XXTestTim') {
            [object[]]$output = $i.settings.classes.exceptions | Select-Object @{l = 'policy_id'; e = { $i.id } }, @{l = 'policy_name'; e = { $i.name } },
            @{l = 'policy_platform'; e = { $i.platform_name } }, @{l = 'exception_id'; e = { $_.id } },class,expiration_time| Where-Object {$_.class -eq "MASS_STORAGE" -and $null -eq $_.expiration_time}
            $Setting = [PSCustomObject]@{ classes = @(@{ id = 'MASS_STORAGE'; exceptions = $output })}
        }
      }
    }
    
    foreach ($s in $Setting) {
      $s.classes.exceptions.foreach{$_.expiration_time ="2025-11-01T22:00:00Z" }
    }
    
    write-host -Object $Setting
    try {
      Edit-FalconDeviceControlPolicy -Id $PolicyId -Setting $Setting
    }
    catch {
      Write-Error $_
    }
  }

End

# Set baseline token request parameters
$Token = @{} 
@('ClientId', 'ClientSecret', 'Cloud', 'Hostname').foreach{
  if ($PSBoundParameters.$_) { $Token[$_] = $PSBoundParameters.$_ }
}
Request-FalconToken @Token
[string[]]$MemberCid = if (!$MemberCid -and !$PolicyId) {
  # Attempt to retrieve MemberCids
  @(Get-FalconMemberCid -Detailed -All -EA 0).Where({ $_.status -eq 'active' }).child_cid
}
}
process {
[string[]]$OutputList = if ($MemberCid) {
  if ((Test-FalconToken).Token -eq $true) { [void](Revoke-FalconToken) }
  foreach ($Cid in $MemberCid) {
    try {
      # Authenticate with Member CID and output exceptions
      Request-FalconToken @Token -MemberCid $Cid
      if ((Test-FalconToken).Token -eq $true) { Write-PolicyException $Cid }
    }
    catch {
      Write-Error $_
    }
    finally {
      if ((Test-FalconToken).Token -eq $true) {
        # Remove authentication token and sleep to avoid rate limiting
        [void](Revoke-FalconToken)
        Start-Sleep -Seconds 5
      }
    }
  }
}
elseif ((Test-FalconToken).Token -eq $true) {
  if ($PolicyId) { Write-PolicyException -PolicyId $PolicyId } else { Write-PolicyException }
}
}
end {
if ($OutputList) {
  @($OutputList).foreach{ if (Test-Path $_) { Get-ChildItem $_ | Select-Object FullName, Length, LastWriteTime } }
}
}

[Vixepti]

Not possible to update expiration time
I have to delete and recreate exclusions