Add secret rotation fundations

which required a major refactoring since the concept of active key and multiple key pairs had to be introduced.

Closes #3563227