client: initial client work for rotate-key