Fix bug where RRSIG expiry may come before TTL expiry.