setresign should use dns_time64_from32 to determine when to resign.