Is there a way to rotate a client certificate while in use?

[haimgel]

We are using mTLS for client authentication, and this works except when the certificate needs to be rotated: I wrote some code to "watch" for certificate changes on disk, create new GRPC::Core::ChannelCredentials and assign it to config.credentials, but I don't see it taking effect in the worker: the worker's poller still errors with GRPC::Unavailable. Are there any workarounds for this?

I have a similar concern for a client-side code, it looks like once the "default" client is created in the Temporal module, there is no easy way to replace the certificate that it uses.