Variable DB_PASSWORD_ROTATION_DAYSConst

Days between rotations. A password is accepted for twice as long, so the one a runtime holds outlives the next rotation by a whole period.