I've used this at point in the past and it did seem relatively pain free to implement. Never quite got round to how certs could be reloaded though, while still

I've used this at point in the past and it did seem relatively pain free to implement. Never quite got round to how certs could be reloaded though, while still honouring requests.