code: func NewTLSRenewer(s *SecurityConfig, connBroker *connectionbroker.Broker, rootPaths CertPaths) *TLSRenewer {
  	return &TLSRenewer{
  		s:          s,
  		connBroker: connBroker,
  		renew:      make(chan struct{}, 1),
  		rootPaths:  rootPaths,
  	}
  }
docs: // NewTLSRenewer creates a new TLS renewer. It must be started with Start.