Why not go in the other direction? Make the rollover happen every few years as just a normal part of operation. It means it'll be a well tested code path.
It would preclude the existence of long-running GPS devices. I'm pretty sure that, in addition to devices that never have tested the rollover scenario, there are actually older devices produced in 2000s and still running today.