we need the ability to specify when rollovers will happen (like "1st of every month") rather than by key lifetime.