Why do we need primary and secondary keys? Having 2 keys mandatory?

ARTIFACTORY: Support for multiple GPG keys in Artifactory

AuthorFullName__c
Amith Kumar Mutakari
articleNumber
000005204
ft:sourceType
Salesforce
FirstPublishedDate
2022-01-25T08:36:01Z
lastModifiedDate
2022-01-25
VersionNumber
6
Although it is not mandatory to have two keys for a repository, it is easy to recover if the primary key is deleted, we can still sign the packages using the secondary key. The secondary key just acts as a backup key.

User-added image
From the rpm/debian repository configuration section, we will be able to assign the GPG keys to the repository and we need to make sure the (debian/rpm) clients are configured accordingly.