Implement distinguishing interests by link. The current implementation checks only name+selectors (Issue #3162).
#3162 match ForwardingHint field
Limit the maximum time the validation process is allowed to run before declaring failure
Ability to customize maximum lifetime for trusted and untrusted certificate caches. Current implementation hard-codes them to be 1 hour and 5 minutes.