Thread t = new Thread(r, "SecureKeyManager-Rotation");
                t.setDaemon(true);
                return t;
            });
    private java.util.concurrent.ScheduledFuture<?> rotationTask;

    /**
     * Configure key rotation interval
     *
     * @param intervalMillis rotation interval in milliseconds
     */
    public void configureKeyRotation(long intervalMillis) {

        assertNotNull(encrypted2);

        // Verify rotation occurred by checking metrics
        assertTrue(context.getKeyRotationCount() > 0, "Key rotation should have occurred");

        // Can still encrypt after rotation
        byte[] plaintext3 = "Message after rotation".getBytes();
        byte[] encrypted3 = assertDoesNotThrow(() -> context.encryptMessage(plaintext3, 3L));

    // Store session key and preauth hash for key rotation
    private byte[] sessionKey;
    private byte[] preauthIntegrityHash;
    private int rotationCount = 0;

    // Key rotation tracking - use atomic for lock-free operations
    private final AtomicLong bytesEncrypted = new AtomicLong(0);
    private long encryptionStartTime = System.currentTimeMillis();

    // Configurable key rotation limits with defaults

     * @param maxGlobalAttemptsPerMinute max global attempts per minute
     * @param lockoutDuration duration to lock out account/IP
     * @param cleanupInterval interval for cleaning up old entries
     */
    public AuthenticationRateLimiter(int maxAttemptsPerAccount, int maxAttemptsPerIp, int maxGlobalAttemptsPerMinute,
            Duration lockoutDuration, Duration cleanupInterval) {
        this.maxAttemptsPerAccount = maxAttemptsPerAccount;

     */
    public void recordRdmaSend(int bytes, long durationNanos) {
        rdmaSends.incrementAndGet();
        bytesTransferred.addAndGet(bytes);
        totalSendTime.addAndGet(durationNanos);
    }

    /**
     * Record an RDMA receive operation
     *
     * @param bytes number of bytes received
     * @param durationNanos operation duration in nanoseconds
     */

        rateLimiter = new AuthenticationRateLimiter(3, // max attempts per account
                5, // max attempts per IP
                20, // max global attempts per minute
                Duration.ofSeconds(2), // short lockout for testing
                Duration.ofMinutes(1) // cleanup interval
        );
    }

    @AfterEach
    public void tearDown() {
        if (rateLimiter != null) {
            rateLimiter.close();
        }

    /** Cache duration in minutes for XPathAPI instances. */
    protected long cacheDuration = 10; // min

    /**
     * Creates a new HtmlXpathExtractor instance.
     */
    public HtmlXpathExtractor() {
        super();
    }

    /**
     * Initializes the XPathAPI cache with a specified cache duration.
     * This method is called to set up the cache for XPathAPI instances.

     * This thread sleeps for the specified timeout duration and terminates the process if it hasn't finished.
     */
    protected static class MonitorThread extends Thread {
        /** The process to monitor. */
        private final Process process;

        /** The timeout duration in milliseconds. */
        private final long timeout;

            });
        }

        long endTime = System.currentTimeMillis();
        long duration = endTime - startTime;

        // Then - should complete quickly (this is more of a performance indicator)
        assertTrue(duration < 1000, "Creating and using 10000 EmptyIterators should be fast (took " + duration + "ms)");
    }

    @Test
    @DisplayName("EmptyIterator should work correctly in nested iteration")

     *
     * @return throughput in bps
     */
    public long getThroughput() {
        long duration = System.currentTimeMillis() - establishedTime;
        if (duration == 0)
            return 0;
        return (bytesSent.get() + bytesReceived.get()) * 1000 / duration;
    }

    /**
     * Get number of pending operations
     *
     * @return number of pending operations
     */