Everything here is my opinion. I do not speak for your employer.
If you try to rotate the wifi encryption keys, you're screwed because of bugs. If you don't try to rotate the wifi encryption keys, then you don't know if you're screwed.
Try my project! Tailscale: a new, magically easy mesh VPN based on WireGuard.