DtlsTicketKeyManager.rotateKey

Rotates to a new ticket encryption key.

While the key ring still has free slots the new key fills the next slot. Once the ring is full, rotation advances to the next slot (evicting the oldest key) and writes the new key there, making it the active key immediately.