Low: controller: Unlocked lrm_resource should include cleared/expired

...locks in xpath. We can delete lrm_resource entries that are cleared
(= 0) or expired (shutdown-lock < current_time - shutdown-lock-limit).
The check for expired also matches the cleared case.