Purge secret keys 28 days after expire.

Nasty bug!  Don't expire keys 28 days before expiry.