corporate shared key identity is the root of the complaint. and the whole concept of "vislibility". idk, i honestly couldn't care less but key rotation is a client side problem if you ask me. web of trust and trust on first use mechanisms and revocations already solve the problem for key rotation but nobody has bothered to apply them to clients. i don't think anyone is really thinking that hard about it by the fact the obvious options aren't even being looked at.