This option is useful primary during upstart when we want to start Sentinel:proxy quickly. There surely must be a valid cert before proxy start so it must be downloaded when there's no. But in case we have a valid cert - which is nearly expired - we do not want ask for renew right on. The renew could be done later on - probably as a backgroud job.