We rotate the keys whenever someone joins or leaves, although the mechanism is more efficient when someone joins than one someone leaves.

I don't think we've made the SFU repository public yet, so I don't think I can comment on that yet. Likely I'll be able to in the future.