Keys will need to be changed (periodically, a compromise, infrastructure change). The operational procedures should account for key management.