Right now, I think if you apply changes that only affect a bridge, OR need to restart a bridge using kubectl rollout restart deployment matrix-bridge-twitter for example.... it'll generate new config I think.... and the shared secrets wont be the same in the live version of synapse.

I think!

If the config exists, you shouldnt just go remake it? But then how do you deal with the issue of wanting to update the other config?