code: func (process *TeleportProcess) syncServiceRotationState(ca services.CertAuthority, conn *Connector) (*rotationStatus, error) {
  	state, err := process.storage.GetState(conn.ClientIdentity.ID.Role)
  	if err != nil {
  		return nil, trace.Wrap(err)
  	}
  	return process.rotate(conn, *state, ca.GetRotation())
  }
docs: // syncServiceRotationState syncs up rotation state for internal services (Auth, Proxy, Node) and
  // if necessary, updates credentials. Returns true if the service will need to reload.