Feature Overview (aka. Goal Summary)  

The files in this directory are checked every image pull so there is no reason to reboot or restart cri-o when adding or removing files. In order to ease working with many mTLS-secured entries, changes to this directory should be added to the no-disruption list.

Goals (aka. expected user outcomes)

Machineconfigs that write to `/etc/containers/certs.d` will not trigger a cordon or reboot.