Kafka certificate rotation investigation