Lets Encrypt clients and a view of sandboxing

[Ed]

acme is the client I prefer for working with Lets Encrypt, but
sometimes you get the unexpected! Sandboxing applications has enjoyed
an uptick with the OpenBSD pledge and FreeBSD capsicum kernel level
tools - along with others. Taking the acme code into portability has
produced an interesting cross system comparison that you may enjoy:

https://github.com/kristapsdz/acme-client-portable/blob/master/Linux-seccomp.md

also - Alpine is a very interesting linux distro