@SuperDicq @hj @sampo @dlatchx @sally Yeah, the only thing you can do without realtime is key-rotation with explicit timeframes, possibly even keys published well in advance so you can easily switch right after even a potential compromise.

Something which OpenPGP in theory allows and in fact the design of having subkeys should help but in practice it's unusable.