letsencrypt DNS-01 validation

rfe: Add support for DNS-01 validation of letsencrypt certificates. This would be especially nice for nodes that don't otherwise have/need a web server enabled (mail server, name server, db server).

It looks like certbot does not currently support dns-01, but there are existing clients that do, and support some DNS api's; maybe ispconfig's remote api would be a good interface to add the records.

https://github.com/Neilpang/acme.sh#8-automatic-dns-api-integration https://github.com/lukas2511/dehydrated/wiki/Examples-for-DNS-01-hooks