1. Preserve mode, owndership, timestamps when copying certificates. Ownership is updated after copying. 2. Reload dovecot on mail.lunch.org.uk.
This way we can ensure we get the ownership and permissions right. Also explicitly restart exim on mail cert updates.