Comment by datadrivenangel

Does having to refresh the key every 6 weeks instead of every year or whatever actually make a meaningful difference security-wise?