To my understanding, the headers generally are in every request but they are sent in the context of the shibboleth session, so the shib IDP send them once and your shibd create the headers at each request, usually in your httpd server that reads them from shibd. So they're not updated "live", you need to recreate a session to get them updated. I think login-renew logs out and logs in again to renew the headers values.