How do you safely rotate secrets in a running app?

Store secrets in Vault/K8s Secrets; refresh without full restart using Spring Cloud. java @RefreshScope @Component public class DbConfig {...