While this doesn't quite complete our plans for certbot support (it's not documented, etc.), this is a great stride forward.