Vault Agent keeps rotating certificates but the service never reloads

A host renews certificates automatically and the consumer still serves the old cert until manually restarted.