Add max expiration option

[cgzones]

Add an option to limit the maximum expiration time, especially for API requests.

[matze]

I'm wondering: why not use the largest set expiration instead of a separate variable? Also code wise this should better be its own layer.