At this point, we have local and remote repositories working well and stably; it's now time to introduce credential rotation, where we create new credentials on a lifetime/half-life basis and make use of the remote repository support (where used) to redistribute the credentials.