Officially replace Certbot with Lego

[NiceGuyIT]

Is there any interest in officially moving to lego from certbot? Lego has several advantages over certbot.

1. Doesn't require root for DNS authentication. HTTP authentication requires access to the web server.
2. Doesn't require plugins for the various DNS providers. Certbot requires DNS plugins to support most DNS providers. Additionally, the DNS plugins may not be available for the OS.
3. Automating the renewal is much simpler. The necessary information like provider name, account name and API key are passed to Lego via env vars.
   • Sensitive information can be encrypted with age.
4. Since the renewal can be encrypted/automated, it can be hooked into the update script.
   • Adding it to a CRON job would be outside the official scope because it requires restarting services.