This change makes the leader elector use a client that internally has
a smaller timeout than the renew deadline, which avoids a situation
where a single request timing out makes us lose the leader lease.

Signed-off-by: Vince Prignano <vince@prigna.com>

This change is a follow-up to the one that introduces the usage of the
leader-elector with client timeout. That change was breaking because it
introduces a new option and always assumed it was set. This change makes
us only use that option if its actually set.

… of fsnotify (#3023)

* Reestablish watch for the certificate paths

* Remove fsnotify and use cached read watcher

* Simplify return

* 🐛Fix certwatcher test to be backwards compatible

---------

Co-authored-by: Maxim Muzafarov <m.muzafarov@gmail.com>

…3028-to-release-0.19

[release-0.19] 🐛 Use leader elector with client timeout

Signed-off-by: Vince Prignano <vince@prigna.com>

🌱 add deprecated Watch() to certwatcher