R=agl CC=golang-codereviews https://golang.org/cl/95050043
When selecting keys for encryption, don't select keys that have expired. Fixes golang/go#5808. R=bradfitz CC=golang-dev https://golang.org/cl/10847043