> Rekeying is easy- set up a new volume, mirror to it, then remove old volume. Right, just have to transfer those 10TB every time a key needs to be rotated, no

> Rekeying is easy- set up a new volume, mirror to it, then remove old volume. Right, just have to transfer those 10TB every time a key needs to be rotated, no biggie! I think that is the reason why most systems use two levels of keys (user keys encrypting a master key. Rotating means ditching the user keys, not the master.)