File README.hooks of Package dehydrated.openSUSE_Leap_15.1_Update
Dehydrated's hooks only run as user dehydrated. To circumvent this limitation, i.e. when services need to be restarted, all executable files in this directory will be executed as root after the certificate update has run.