Better certificate rotation for SAML connections

Feedback
21

+1 for me on this, certificate rotations should be made as simple and ideally as automated as possible

22

+1 for me on this as well. This would eliminate the need for login downtime for certificate changes.