After dropping support for Kafka 2.3 with Zookepeer 3.4, we can now stop using the Zookeeper sidecars and use Zookeepers TLS support directly. That should also allow us to stream line Zookeeper scaling so that it does not need rolling udpates.