Revoke by age, not at the trial's end

Assigned trial keys are revoked after a configurable number of days (default 30) since assignment, so an extended trial keeps its key.