Re: NEW: security/hitch (pledged)

Take three with updated pledge diff also fixing an actual bug in the
reloading logic when the `ocsp-dir' parameter has changed.

It's already reported upstream, I discovered this while playing around
to reduce pledge promises.