[Unit]
Description=rotate keys

[Service]
Type=oneshot
ExecStart=#BINDIR#/rotate-keys