rotating ACME credentials

[okruga]

Hi It will be helpful if acme_registration provides an option to generate an account private key within the resource itself. The use case is when we need to rotate ACME credentials just by changing key_id and hmac_base64, and for now, apart from changing the above parameters we also need to trigger the recreation of tls_private_key

The second question is related to acme_certificate. Updating account_key_pem causes resource recreation, but can't it just be updated if it's used only to authenticate to the ACME server?

thanks in advance.