But can you rotate keys (deauthorize old, add new) without changing the pubkey?