I have a suggestion, although a rather low-priority one.
How about an option in CIS to automatically purge HIPS/Firewall rules and Trusted Files List every X hours? (If the computer is shut down at the point the purge should have taken place, then it will run the purge at the next time the computer starts) (I’d personally set it to every 24 hours)
+1 Love this feature to include in HIPS, Firewall and Trusted Files. Have an option to schedule it on regular basis (eg. After nth system restart, weekly, monthly, etc).
They pile up and may cause slow-down if you don’t take notice for century.