> Until #3 is addressed, hard-code the key Fetch new TLS certificates when they expire _in a secure way_
Fetch new TLS certificates when they expire in a secure way