Time

Provide it where appropriate. But not where not. Can debate whether to check the time in initial (config-creation-time) own-certificate validation to detect own expired certificate.