Add expiration date for API keys

[noctarius]

The API to create, retrieve, delete brach-level API keys must be extended to support optional expiration dates.

The expiration date should be implemented as a due date/time value and is optional. In case, now explicit expiry date is given, it is either undefined (if the JWT spec accepts this) or set to something like now+100 years which is effectively "without expiration".