An htpasswd rotation looks applied and the old password still works

The secret file changes, yet the watcher never fires because it subscribed to the parent directory handle instead of the file path.