keygen: describe how to prolong already expired keys
    
    We don't want to prolong already expired keys by default because
    
    1. We shouldn't let keys expire in the first place
    2. We may want to manually set some key to expire and in that case
       this script would revert it.