Everything here is my opinion. I do not speak for your employer.
If you try to rotate the wifi encryption keys, you're screwed because of bugs. If you don't try to rotate the wifi encryption keys, then you don't know if you're screwed.
My latest project is Tailscale: the easiest way to use WireGuard and 2FA.