make expired keys explicit