Improve error messaging around expiration

[tstirrat15]

If you do relation: foo with expiration and some_caveat and run zed validate, you get an error message saying "unexpected TokenTypeKeyword" or something to that effect. It'd be nice if we provided a bit more context, especially because and expiration is a special form and that isn't immediately apparent.