This is such a delicate operation - rotating trust anchors manually for a cluster running in production is a bit scary.