Secrets mounted as volumes are not watched for changes

When docker creds are passed in as CREDENTIAL_PROVIDER_SECRET_PATH, the values are only read once at startup.

If these secrets ever change (i.e. as part of a rotation), the controller has to be restarted in order to use the new values.