Feature/29 key rollover with keyid backport

Backport of https://github.com/OpenConext/OpenConext-engineblock/pull/30 to 3.8