It's a Certbot plugin that answers DNS-01 challenges locally, so I can finally de-auth and delete those digitalocean API credentials from my server, while still getting wildcard certs from letsencrypt. It's not much, but I'm proud of it. https://github.com/TooManyBees/acme-champion