NewKeystore returns a store for storing the certificate data and the ability to retrieve it safely.

NewWatch sets up monitoring on a slice of paths and will execute the update function to process each event.

OLMGetCertRotationFn is a convenience function for OLM use only, but serves as an example for monitoring file system events.