I wonder how feasible, realistic, &c it would be to have included in the deletion/destruction policy to have a step/section in there to say "after verification of deletion, make a new backup to replace the old backup" which would be a backup refresh "outside" of the usual periodic backup.