v0.2.0

• Bump to go 1.25 and implement reload via SIGHUP & cert changes
• Load cert, then cache it until 1 minute before expiry
• Improve log structure, add some debug logging
• Bump goproxy to support HTTP/2 mTLS

v0.1.2

Fix not before timestamp for localhost PAC server cert

v0.1.1

goproxy: bump for using ecdsa rather than ed25519 fallback keys

v0.1.0

CA cert: Allow using a KMS backed CA

BREAKING! The commandline options have been refactored to
disambiguate various options.

v0.0.1-alpha4

Fix loading of cert bundles

v0.0.1-alpha3

Add --clientcert option to allow loading cert from path instead of kmsuri

v0.0.1-alpha2

Rename to step-kmsproxy-plugin

Bit of a derp. The other way around doesn't work with smallstep cli plugin integration

v0.0.1-alpha1

Initial import