Implement client-initiated rekeys after an hour, or after 1Gb of