Hitless TLS Certificate Rotation in Go