when server-cert id is changed for the listener, update role policy as well