Config Hot-Reload
- The agent polls
/agent/configevery 60 seconds for changes to intercepted domains and policy settings. - When the list of intercepted domains changes, TLS certificates are automatically regenerated for the updated domain set.
- No agent restart is required for configuration updates — changes take effect within the next poll interval.