Sign your own binaries with go-tool-base, part 7: rotation and break-glassRotate a release signing key and recover from a bad one without locking users out. Why asymmetric KMS keys have no auto-rotate button.