Does anyone know if the CAM would move connected hosts out of the certified device list and thus into the Authentication VLAN if the hosts are close to being expired on the CDL? Or are the connected hosts kept on the access vlan when they are close to being expired from the CDL?