[db-wg] Proposal: key-cert update procedure change