acme client for managing certificates for multiple VMs, keeping private keys on the target VMs, while DNS credentials only exist on the VM with the acme client.