@santosh only the tls config plugin implements a refresh. this is done via: https://github.com/facebook/osquery/blob/11da0674e64c230a1c4ab51ca372e1aa3b4f34ad/osquery/config/plugins/tls.cpp#L130-L135