Currently certificate import is run on a schedule, which can lead to issues with short-lived certificates in k8s where the certificate is generated externally.