Strategy for RSA migration thresholds