Add information about certificate rotation

https://github.com/minio/kes/blob/8bfdb43e1b7c9bf64ddc18a6ab5f15135943441f/cmd/kes/server.go#L269

Every 15 mins, the certs are reloaded, meaning that customers do not have to restart KES to install a new server certificate. We should document this. 