Strimzi / AMQ Streams has two annotations strimzi.io/force-renew and strimzi.io/force-replace which can be used to trigger renewal or replacement of the Cluster or Clients Certification Authorities. But these work only with the Strimzi-generated CAs. When users bring their own CAs, they cannot use these. We should make sure that this is clear from the documentation.

This was raised s part of https://issues.redhat.com/browse/ENTMQST-2331