Keys should be versioned whenever they change transparently to the user, and it should be possible to revert to any previous version. There should also exist some type of garbage collection, to remove old key versions and recover space.