Cloud key rotation

Rotation has to work before you need it, because the moment you need it is the worst time to discover it does not.

The credential is in more places than the register records, something breaks when it changes, and nobody is sure what. Practising rotation on a schedule, when nothing is wrong, is what makes emergency rotation possible during an incident.