How to use certs in non-root services?

I posted instructions and a renewal script for qmail, that might be helpful for some other non-root cases as well.

Qmail renewal script