class InstanceZTSProvider implements InstanceProvider {

    @Override
    public InstanceConfirmation refreshInstance(InstanceConfirmation confirmation) {

        // we do not allow refresh of zts provider certificates
        // the caller should just request a new certificate

        throw forbiddenError("ZTS Provider X.509 Certificates cannot be refreshed");
    }

}