Domain aliases don't work with ACME endpoints

Domain's which are aliases of others can't be used for things like HTTPREQ for acme.

Maybe we should just proxy the write requests through to the real domain?

Should this just be limited to HTTPREQ? What about DDNS-Friendly record updates? Or other endpoints?