Which three types of entities should you update?

You have an Azure IoT solution that includes an Azure IoT hub, 100 Azure IoT Edge devices, and 500 leaf devices.
You need to perform a key rotation across the devices.
Which three types of entities should you update? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. the $edgeHub module identity
B. the $edgeAgent module identity
C. the leaf module identities
D. the IoT Edge device identities
E. the iothubowner policy credentials
F. the leaf device identities