Secret changes don't trigger rolling machine restarts automatically

Unfortunately, that’s a bit of a non-starter for us. I suppose the only option will be to add a flag for the sync to completely disable machine restarts and the user will have to do that manually. I do find the decision to put all of this logic in the CLI a bit bewildering. I hope you decide to revisit that decision at some point and provide API endpoints for doing deploys like this.