Rotate the signing secret with an overlap during which both secrets sign (the new secret is returned once)

Send on every write that creates or changes money or state; a replay with the same key returns the original result with 200.

Cut the retiring secret off when a rotation is already inside its overlap (otherwise 409)

How long the retiring secret keeps signing; zero is the default day, at most a week