> If an organisation wants to prevent that, it can rotate DKIM keys and release the old secret keys. This way, any future email with valid signature can be denied as a forgery

OK, so, not the current private key. These are superceded keys made available for hysterical raisins.