Where are we on key rotation fam?

Use case is migrating users from custodial nsecs to self-custody.

Mitigating the trust-me-bro I deleted it pinky promise from the provider.