* exclude /sys/leases/renew from registering with expiration manager * adding sys/leases/renew to return full secret object, adding tests to catch renew errors