// Create multiple versions
        for (int i = 0; i < 5; i++) {
            keyManager.rotateSessionKey(sessionId);
        }

        // Clean up, keeping only 2 versions
        keyManager.cleanupArchivedKeys(2);

        // Verify only recent versions are kept
        assertTrue(keyManager.hasSessionKey(sessionId + ".v4"), "Version 4 should exist");

        return rotated;
    }

    /**
     * Clean up old archived key versions
     *
     * @param keepVersions number of versions to keep (minimum 1)
     */
    public void cleanupArchivedKeys(int keepVersions) {
        checkNotClosed();

        if (keepVersions < 1) {
            keepVersions = 1;
        }

        Map<String, java.util.List<String>> sessionArchives = new HashMap<>();