shouldRotate

Check if the current key should be rotated based on policy.

Return

True if key age exceeds KeyRotationPolicy.maxKeyAgeDays.