The more a key is used, the shorter its lifetime should be.

When not using the full keyspace, the key should be extremely random.

Keys should be backed up or escrowed in case of emergencies.

A key's lifetime should correspond with the sensitivity of the data it is protecting.