Issuers, ClusterIssuers, and certificate policies.
Rotate cluster certificates, SOPS keys, and SSH keys.