amp</code>, <code>citadel_server_root_cert_expiry_seconds</code>, <code>citadel_server_cert_chain_expiry_timestamp</code>, and <code>citadel_server_cert_chain_expiry_seconds</code> update when new certificates are loaded.</p></li><li><p><strong>Added</strong> <code>SECRET_GRACE_PERIOD_RATIO_JITTER</code> with a default value of <code>0.01</code> to introduce a randomized offset in <code>SECRET_GRACE_PERIOD_RATIO</code>.
Without this configuration, proxies deployed at the same time will all request renewed c