Assign a production credential's rotation owner, identify every consumer, verify replacement use, and prove the old credential has been revoked.