Authentication
Rotating keys
Rotate keys on a schedule or right away if one may have leaked. Kitecode keeps both keys valid until you revoke the old one, so services keep running during the switch.
kitecode keys create --expires 7d kitecode keys revoke key_4f2a
Deploy the new key to every service before you revoke. Requests signed with a revoked key fail with a 401.