In the MLS protocol, a group's symmetric encryption key is rotated whenever a member is added or removed