it used to be

--tls_config_refresh

but then it got generalized and renamed to

--config_refresh

it is --config_tls_refresh (not tls_config_refresh) also when I used, I saw --config_tls_refresh was active in the output of --verbose)