fac90c66db
- replace default incus certificates with vault-generated ephemeral certificates - configure incus service to restart on certificate changes Reviewed-on: #405