Key-rotation ratchets

Subtopics:

.. toctree::
   :glob:

   ratchet-*

TODO: pages for the following

Security definitions: past-conf (fwd-sec) vs future-conf (self-heal)
Optimisation against a KEX dependency graph