Child keys should exist sequentially with short periods of overlap between them.

Oh and also delegations are called certificates in the real world so why not stick to the terminology.