How to get dovecot to reload an SSL certificate with minimal impact

Just reload it instead. There is no reason to restart and interrupt everyone's service.

systemctl reload dovecot