KMS should reload whitelist and default key ACLs when hot-reloading

When hot-reloading, KMSACLs#setKeyACLs ignores whitelist and default key entries if they're present in memory.

We should reload them, hot-reload and cold-start should not have any difference in behavior.
Credit to dilaver for finding this.