code: func (a *AuthWithRoles) RotateCertAuthority(req RotateRequest) error {
  	if err := req.CheckAndSetDefaults(a.authServer.clock); err != nil {
  		return trace.Wrap(err)
  	}
  	if err := a.action(defaults.Namespace, services.KindCertAuthority, services.VerbCreate); err != nil {
  		return trace.Wrap(err)
  	}
  	if err := a.action(defaults.Namespace, services.KindCertAuthority, services.VerbUpdate); err != nil {
  		return trace.Wrap(err)
  	}
  	return a.authServer.RotateCertAuthority(req)
  }
docs: // RotateCertAuthority starts or restarts certificate authority rotation process.