Currently, changing certificate requires to stop/restart wave.
It is a problem for high-availability (i.e letsencrypt certificates lasts for 3 months at max)

The idea is to upgrade ranch acceptors live (eg without wave restart) to use new certificates in lieu of near-to-expire ones