Confirmation token to prevent accidental rotations Can be any string, e.g., "confirm_rotation_12345"
Optionalgrace_Grace period in hours (default: 24, max: 168) During this period, both old and new credentials are valid
OptionalreasonOptional reason for the rotation (for audit purposes)
Request to rotate a credential