pub const ROTATION_WARN: Duration;
Age of the oldest work waiting for key rotation before serve warns, unless configured: 30 days.
serve