Centauri should expose some kind of healthcheck endpoint, to highlight any issues with certs that can't be renewed (after #22 is implemented). Possibly on a separate port so you can just not expose it externally?
