ACME: manage links in /etc/credentials
Right now the acme service stores its certificates (the readable copy of the repository) in /var/lib/acme, but NGINX looks for them in /etc/credentials/public, which are actually symlinks to /etc/credentials/selfsigned. The original idea was to switch the symbolic links to the ACME-managed directories, site by site, when the ACME certificates became available.