Operator fails to rotate client certificates

When the client secret is updated the changes are never propagated into the intermediate persistence secret used by the Operator.  The intermediate secret has a key named 'clientCertificate' which the Operator is supposed to keep in sync with the client tls in use.

Fix seems simply enough which is to update the clientCertificate on change to client secret.