Comment by gzread

You don't have to expire your DNSSEC keys. You have the option to, or not to. DNSSEC seems extremely flexible about how you manage your keys.