Docker swarm updating certificates?

Question

Docker

Hello!
There is nginx running in docker swarm. A lot of certificates are connected to it. Currently made through secrets. But after updating the certificate file docker swears

failed to update secret dev-test_sec: Error response from daemon: rpc error: code = InvalidArgument desc = only updates to Labels are allowed

That is, it is necessary to change the names, tobish rotate turns out. Yes, for configs, this approach is very good, so as not to accidentally drop the service and there was the possibility of a rollback, but for a certificate it would be nice to cut down this restriction somehow or somehow solve this issue in a different way. The certificates themselves are updated by cron through certbot...
While the idea comes to mind to write a script, check if a certificate has been changed, change its label and waste the service...
Any ideas?