code: func (r *RaftDEKManager) NeedsRotation() bool {
  	h, _ := r.kw.GetCurrentState()
  	data, ok := h.(RaftDEKData)
  	if !ok {
  		return false
  	}
  	return data.NeedsRotation || data.EncryptionKeys.PendingDEK != nil
  }
docs: // NeedsRotation returns a boolean about whether we should do a rotation