Periodically refresh keyring.

This change allows kubelet to use the latest credential when it fetches
docker images.