fix #2079: add periodic auth key rotation