Direct call doesn't work because of how arguments are passed to postrotate.
For some reason (Debian bug?) the default rsyslog-rotate script was not properly rotating rsyslog logfiles. Instead, explicitly call systemctl kill -s HUP for this, using a full path.
