All keys — current + still-in-grace ones. Most-recent first.
Drop keys that are past grace.
Rotate: new key becomes current; previous key is retained for grace.
All keys — current + still-in-grace ones. Most-recent first.