Unfortunately there is one local org I support that doesn't want to move off Coinbase 😮‍💨

Yes, key management/rotation. This gets brought up from time to time but I never see a solution proposed.