A downstream service credential is rotated in Key Vault, but application instances keep using the old cached value indefinitely. What should be improved?

1. Rename the secret's description only
2. Increase output token limits
3. Secret refresh, version selection, and connection lifecycle handling
4. Delete all application logs