there should be a succession operation that lets you change over, so you sign a thing saying "this identity now uses that key"