There are two clients interacting with the /validate endpoints of Policy Server: the kubernetes API server and audit-scanner. When mTLS is enabled they are going to use client certificates issued by two different CA.

The following changes have to be done:

• Allow the --client-ca-file to take multiple values by using a comma separator. This must be handled also when reading the contents of the environment variable
• Extend the inotify code to watch for changes done to all the files mentioned by the --client-ca-file

Talking about the inotify watch code, the code provided as part of #1075 has to be refactored a bit. The current code is not going to scale nicely (in terms of readability) when multiple client CAs are going to be handled.