It can be anything, the client decides the threshold at the time it is generating the key. To rotate for now for you have to go there on the admin and reset it manually. At some point I'll finish the DKG implementation so not even the first client the person uses has to see any keys. That would also be good in case someone wants to do something like an X bridge with a key that the rightful owner can later claim, for example (as long as the operators involved in creating the key attest that the key was generated fairly), but this is a different topic.