There is a desire for automatic certificate renewal from the package management sense. That is, that packages could request that certbot go and get them a package. Harlan's Proposed heirarchy: /etc/letsencrypt/