endpoint allows negative TTL values

[pjenvey]

Integer validator for TTLs allows bogus negative values. A large enough negative value could even propagate into the expiry database field (our current rust code assumes they're unsigned so would drop them).

autoendpoint should either likely consider them invalid (or it could drop them)