The designate worker pod should be restarted whenever the contents of the rndc secret changes. Update the worker's controller to create a hash of the secret's contents to store in the Hash field of the status. Also trigger updating the pods if a change is detected.