Fix hilarious reverse-expiration bug

server/keystore.go

@@ -116,7 +116,7 @@ func (s *KeyStore) expire() {
 	for t := range time.NewTicker(600 * time.Second).C {
 		s.mx.Lock()
 		for u, k := range s.userKeys {
-			if k.expiry.After(t) {
+			if k.expiry.Before(t) {
 				wipeBytes(k.pkey)
 				delete(s.userKeys, u)
 			}