Secure Key an artisanal entropy service. It adds an environment variable to your app with a current securely generated key and the previous key. Every so often it rotates your key by generating a new one, but still lets you accept things signed with the old key by keeping the old key around until the next rotation.
Remembering to rotate your keys is hard, this add-on takes care of that for you.