
<			key_set_expiry(key, prep->expiry);
---
>			time_t safe_expiry = (prep->expiry > 0 && prep->expiry < LONG_MAX) ? prep->expiry : LONG_MAX;
>			key_set_expiry(key, safe_expiry);
