• The problem with this is that you need to know *when* N signed N+1, and you can't believe N about the time.

Out of band verification. You make sure the chain you have connects properly up to the current KSK.

Or you tell folks turning on old computers to just reconfig first. :)