Add the text "TTL-style unit suffixes or ISO 8601 duration formats", just like we do at other places that are duration option types. Also, in the dnssec-policy "keys" example, use a TTL-style unit too.