The key maintenance problem
How do I keep the keys secret?
How do I update keys over time?
How do I keep keys from being corrupted?
How do I keep keys from being lost?
What are the tradeoffs between these?
- Secrecy vs. Preventing loss
- False revocation recurses the challenge
- etc.