kasp: bug in rollover: set retired on predecessor when creating a successor.

The key rollover logic does not remove the old predecessor since it is not retired when introducing a successor key.