Minor One of our users, using the auditor, tried to change the signature validity in the policy from 7 days to one month. When updating, the signer would create some new signatures and leave some old signatures. It could leave some old signatures, because those would still have a valid Refresh period.
The auditor should not have complained if it had notion of history of the policy. However, this user is running 1.0.0 alpha, so this might have been already fixed a long time ago. But it got me thinking: Should the signer create new RRSIGS if the validity changed in the signer configuration?