The jackett, sonarr, radarr and lidarr runtimes discovered the key from the software's config at start, so after a rotation they held the old one. They now read the vault's file first and restart when it is remade. qBittorrent's init sets WebUI\BanDuration=60 so a consumer's step still carrying the previous value no longer locks the others out for an hour.