etc/config.tcl: Don't reissue long-term certificates daily.