fr33domlovercjslep[m], that's true, but I do want to support blind rotation. I want to try using the OCAP tokens to solve this problem, at least for the activities that will be requiring OCAPs. Either using secret tokens, or using public tokens + permanent per-server keys