when using functional accounts on Linux an API call is missing to trigger a password (and DSS key) rotation on a specific server or set of servers.
I.e. an API which allows the caller to start a scheduled task to change the password (and DSS key) on a specific server using the functional account.
Rotation of DSS keys is currently not possible. Submitted as a separate idea.