in pan-domain-auth-verification/src/main/scala/com/gu/pandomainauth/service/CryptoConf.scala [122:124]
override def passes(oldConf: Verification, newConf: Verification): Boolean = newConf.acceptsActiveKeyFrom(oldConf)
}
case object PreAcceptNewKey extends TransitionCriteria {