Certbot

If we run into problems with mod rewrite (for QualityBox) interfering with Certbot renewals, then make sure to implement a separate (final) rewrite rule for /.well-known [1]