Configured domains must be under acme-challenge-server control (i.e.
configured via static configuration or LDAP)