rotateDeviceAuthenticationKey

Submits a routine device authentication key rotation (docs/device-authentication-rotation.md): PUT /v1/devices/{user}/{device}/registration/rotation for the statement's device. Not signed with a ServerRequestSigner: the authorization carries the current key's signature and the replacement key's proof of possession. Returns once the server replaced the key, or recognized a retry of the rotation that did. Throws SecureMessageTransportException.DeviceAuthenticationRotationRejected.