Reload the cert without restart

Currently moat-shim requires restarting to reload the cert. Let's reload it without restarts or figure out how to restart it in the right moment.