turn-live cert holder (LiveKit TURN/TLS)