That scenario is more complex and has more implications than just
renewing the key. It *also* includes cert revocation so it's implicit
as well.