Rotation life cycle for encryption keys