
<            key_set_expiry(key, prep->expiry);
---
>            if (prep->expiry <= MAX_SAFE_EXPIRY)
>                key_set_expiry(key, prep->expiry);
>            else
>                key_set_expiry(key, MAX_SAFE_EXPIRY);
