TODO
====

  * use /etc/default for dehydrated-cron
  * use /etc/default for dehydrated-hook
  * maybe handling multiple different CNAMEs
    (not sure if letsencrypt allows that, however, dehydrated-nsupdate only
    processes one CNAME)
  * use settings from _dehydrated.$domain.$tld