We need a key rotation event published by the key looser with the new npub that can be attested too by others after out-of-band verification.