Key ceremony is exactly what I addressed in the middle portion of my post.
Don't sign 4 CAs, sign 120 CAs (numbers are estimates). Don't put them into service until you need to.
Maybe it's even possible with the right methods/software to modify the NotBefore time of the issuing CAs in addition to the NotAfter time.