#[kevinmarks]I am happier keeping the certs on the apache machines rather than the load balancer, so I want to copy them; renewing by DNS challenge is fiddly enough that automating it makes sense; it's the cert copying that I'd like to work out easily.