pub const LEAF_REISSUE_BEFORE: Duration;Expand description
How close to a leaf’s expiry a start signs a fresh one rather than serving what is on disk. There is no renewal loop here: signing costs a few milliseconds and needs nothing off this machine, so a start does it whenever the answer is in doubt.