A secret rotates successfully, but an application continues using a cached old password and loses database access. What change best addresses the failure?

1. Grant the application database administrator access without refreshing the password.
2. Disable rotation forever and embed the current password in every image.
3. Implement supported secret refresh and retry behavior that handles credential rotation safely.
4. Change the database DNS TTL only.