That is called revocation and rotation. It's a slightly different use case, with a few competing solutions. But the original question was about something else.