I was wondering what the best way to cycle security keys over time was. For example, a client decides to send you a new key every X months to access whatever. You could store that in a table, but then you would need to query that before you do your actual queries... is that the norm? If it was a desktop app, the table works fine because you can just store it in a global variable or modify the variable on startup kinda thing.... but what about an ASPX Website? Since its all session based, what do you do? I dont even know what to google for this.