Add integration tests for Let's Encrypt feature

[lae]

We should be able to run a local instance of the Boulder CA and run tests against it:

https://github.com/letsencrypt/boulder/

This should probably be done in the upstream systemli.letsencrypt role first, though.