A developer rotates a secret used by multiple services. What is required for a successful rollout?

1. Update controlled references or consumer refresh behavior, validate access, and retire obsolete credentials safely.
2. Change only the secret's description and keep the old credential active forever.
3. Publish both old and new secrets in source control.
4. Assume running processes automatically refresh every secret immediately.