private X509ExtendedKeyManager getThreadLocalManager() {
        synchronized (monitor) {
            X509ExtendedKeyManager manager = threadLocalManager.get(Thread.currentThread());
            if (manager == null) {
                throw new IllegalStateException("Methods to retrieve valid aliases has not been called previously from this thread");
            }
            return manager;
        }
    }
A {@link X509ExtendedKeyManager} which can be updated with new certificate chain and private key while in use.

The implementations assumes that aliases are retrieved from the same thread as the certificate chain and private key.
This is case for OpenJDK 11.

@author bjorncs
security-utils/src/main/java/com/yahoo/security/MutableX509KeyManager.java