yihuaz

Thanks Mark for the review. C-core APIs are removed from the gRFC proposal.

@markdroth Np. I will prepare for two gRFC's for the changes made to gRPC core related to ALTS (#14727) and local credentials(#15909).

@markdroth, instead of creating a new gRFC for ALTS C core API changes, how about re-using the current gRFC by adding in those changes? Since ALTS is still at the...

@ZhenLian, since the new feature will be added to advanced TLS, do you mind taking a look? PLMK if you are busy, I can also take the role.

@ejona86 Just to clarify, since an `SslContext` can be created by `SslContextBuilder` that takes `KeyManagerFactory` as an argument, each time the underlying `KeyManagerFactory` object gets refreshed with a new credential,...

@ejona86 SG. I will come up with a toy example to validate it. I also found a thread that discusses the same issue (https://stackoverflow.com/questions/51411594/reload-netty-servers-ssl-context-for-grpc), but have different suggestions (also proposed...

In C-core, we have an [API](https://github.com/grpc/grpc/blob/master/src/core/lib/security/credentials/alts/alts_credentials.h#L86-L88) that allows to bypass the GCP check. We need to expose it in C++ though. It is not clear to me though how a...