According to The Defiant, scheduled replacement of an API key can result in a period during which two keys are active simultaneously. This overlap occurs when the new key is deployed before the old one is fully revoked. In cases where exposure of a key is suspected, maintaining brief dual‑key activity is treated as a security decision rather than merely an approach to avoid downtime.
