Allow extending expiry of the primary key
Hm, so how about we make this as easy as possible (for the user): Just extend validity to one year in the future (whenever the command is issued)