Support two active keys per agent. "Regenerate" creates a new key and marks the old one as expiring (e.g. 24h grace period). Simple state machine: active → expiring → revoked. This unblocks credential hygiene without overcomplicating things.
Still able to immediately revoke key if needed.
Support two active keys per agent. "Regenerate" creates a new key and marks the old one as expiring (e.g. 24h grace period). Simple state machine: active → expiring → revoked. This unblocks credential hygiene without overcomplicating things.
Still able to immediately revoke key if needed.