storePendingRotationKeyPair

Stores the replacement key pair of a routine rotation. Throws IllegalStateException if one exists already (a pending key is never replaced silently) or if a device recovery or a last-device recovery is pending. The active key is not touched.