Key-Rotation

Sign your own binaries with go-tool-base, part 7: rotation and break-glass

Rotate a release signing key without locking anyone out, and what you're left with if the old key is already gone. Why asymmetric KMS keys have no auto-rotate button.