Force owner and group when creating the tar archive
Listen only on localhost in the example configuration file.
Use a POST instead of GET to generate a certificate server side
Restrict routes by HTTP methods
More validations in the GenerateCertificateHandler
The certDuration must not exceed 24 hours