smbcontrol samba reload-config does not reload updated SSL/TLS certificate files, used by the AD DC LDAP service. There was also a request on the mailing list: https://lists.samba.org/archive/samba/2021-March/235094.html