Don't merge expired certs over the top of an unexpired cert

[brandond]

Fixes an issue where an expired Kubernetes secret would replace the renewed locally-cached cert after cluster startup.

Related to https://github.com/k3s-io/k3s/issues/5163

Signed-off-by: Brad Davidson brad.davidson@rancher.com