@arcanicanis I didn't actually publish any Update activities yet, just hardcoded all users to the new (shared) key. Pleroma refetches the actor when the sig is wrong, so federation is already restored here. If there are long term issues with other software I'll write a script to send Update activities. I think they just need to be signed with the old key.