Avoid deleting keys that have a new-ish timestamp

This is a paranoid safeguard against mess-ups; even if turned against
the wrong prefix it is likely many backups will be retained.

Some of the tests need adjustmenmts to not freak out about this
safeguard.