TODO
====
* use /etc/default for dehydrated-cron
* use /etc/default for dehydrated-hook
* maybe handling multiple different CNAMEs
(not sure if letsencrypt allows that, however, dehydrated-nsupdate only
processes one CNAME)
* use settings from _dehydrated.$domain.$tld