A Secrets Store CSI mount rotates correctly and the Java app still trusts the old chain

TLS still fails in one Java app after certificate rotation through CSI secrets until the pod restarts.