[KevinChasse]

Rotation is explicit and deterministic via the version parameter. Old passwords can be regenerated for rollback; new ones don’t require storage.

[rustyhancock]

But you have to remember a version parameter per password??