@Override
    public String chooseEngineServerAlias(String keyType, Principal[] issuers, SSLEngine engine) {
        return updateAndGetThreadLocalManager()
                .chooseEngineServerAlias(keyType, issuers, engine);
    }
A {@link X509ExtendedKeyManager} which can be updated with new certificate chain and private key while in use.

The implementations assumes that aliases are retrieved from the same thread as the certificate chain and private key.
This is case for OpenJDK 11.

@author bjorncs
security-utils/src/main/java/com/yahoo/security/MutableX509KeyManager.java