Comment 2 for bug 2039261

To what I know, in Go root certificates are loaded only once when the application is started.
Thats why rolling restart helps (app will pick up newly certificates from the trust root)

https://github.com/golang/go/issues/41888