keymanager - don't accept expired keys

Key expiration date maybe should be of type datetime instead of string with the unix time.

(from redmine: created on 2014-10-28, relates #6089 (closed))