dnssec: don't override OrigTtl in sig

When creating a signature and the OrigTtl is already set
don't override it.
The right way around