Context: istio/istio#28017

Plugin configuration is applied every time xDS is loaded that references the same root_id. This is inherently racey if the same root_id is referenced in multiple places. It is also applied if the xDS is rejected, corrupting the existing plugin configuration state.