SP 4.1.1.3 on passwords and keys for access. SP 9.2.2 on key backup/escrow, but no comment on changing of keys.