This idea comes from a security audit on our content delivery application (implementation of DXA)
From a security perspective, it would be nice to have the secret for the cd_user to be rotated on a regular basis, i.e. 3 months.
The old and new secret should have some overlap in rotation in order to provide some time to implement the new secret.