Add documentation for the rotate subcommand
Handle waiting for new creds to becom active more cleanly, deal with inactive keys when rotating