Using the account identifier in the record and and LE mapping the identifier to a public key internally enables key rotario without touching the record again.
The "podman generate systemd" command from the article is deprecated. The alternative are Podman Quadlets, which are similar to (docker-)compose.yaml, but defined in systemd unit files.