The Post-Rotation Re-Scan: Proving a Leaked Key Is Actually Dead

Rotating a leaked credential is the step everyone performs and almost nobody verifies, which is how the old key keeps working from a forgotten config file while the new one does the job. The re-scan i...