pendingRotationKeyPair

The replacement key pair of a routine rotation in progress (docs/device-authentication-rotation.md), or null. Never used to sign ordinary requests.