Use rotation for planned key hygiene, and use revocation when a key may be in an attacker’s hands. Rotation keeps the fleet moving through a grace window; revocation has no grace window and stops the key immediately, so it can break work that still depends on it. For a property-management workload that can spend against an account before an invoice arrives, that distinction is an operational decision, not a naming preference.

At 3 a.m., the useful question is not “which key operation is more elegant?” It is “what page fired, and can I accept this workload failing right now?” If the answer is no because a scheduled maintenance run must finish, rotate and migrate consumers. If the answer is no because an unknown party is spending from the account, revoke first.…