[silisili]

You can and should sign by multiple keys before/during a rollover. That's exactly how it's supposed to work. The client is to check all, and any valid chain.