vici: Fix refcount for CA certificates when reloading authority sections