Clarify behavior of trust expirations

Specifically, it wasn't clear that no `expires_at` meant the trust
lasted indefinitely.

Change-Id: I2b3c7d040476c451243ef3cabaf877c5f82bab03