This is the "certificate downloader" app that runs in the container
with haproxy (via haproxy's "program" configuration).

This version fixes a bug in which the downloader did not always delete
the PEM file for a deleted Secret.