A proper implementation would probably use a quorum of validators to allow for key management updates. These are solved problems.