Perform a key update early in a connection's lifetime

[Ralith]

Inspired by quic-go's behavior as documented in https://mailarchive.ietf.org/arch/msg/quic/glen5JXVLU9BhmIB73E2UOUOp6M/.