Fetching secrets with Vault Agent on Kubernetes is only half of the solution. Here's a simple architecture to auto-refresh Spring's connection pool when credentials are rotated.