how do you rotate keys for a user on a #snac2 instance?

i understand you need to generate a new keypair and then sign your new public key with old one and propagate to the network... how do you practically do that?

cc: @The Real Grunfink