determine a clean way to roll over the axum server function with new certs monthly

it would be nice to store the store the certs in skyfolders main config folder but there are some risks with doing so, if the server is hacked but the intruder does not have sudo they could view the certs