If someone compromised the key they also compromised the system used to automatically generate more keys, so a short expiration is not as helpful as it looks.<p>It&#x27;s even worse than that:<p>A smart attacker will copy the method used to generate keys, and leave the server. Then they can keep generating keys and you will probably never notice.<p>I feel that automation is a mistake, something security sensitive like this should be on a completely different machine.