The provisioner controller has the implementation of the identity function as well as the renew methods with renew after expiry support.
Mariano Cano