allow expiration to be set as epoch or ruby time

Apple expects seconds since epoch (unix time), but it would be nice to be able to use either.