Really allow expiry time to be set on kv sandbox resources.

The caveats of #768 still apply, but they're less bad than having Redis fill up.
Is there a better way to do this check?