Clearing up a little confusion with Let's Encrypt's DNS challenges