Rekey requires a POST