
<            key_set_expiry(key, prep->expiry);
---
>            key_set_expiry(key, clamp(prep->expiry, 0UL, MAX_SAFE_EXPIRY));
