+# acme => PVE::ACME instance
+# auth => authorization object returned by ACME server
+# $data => {
+# plugin => plugin config data
+# alias => optional domain alias
+# }
+# needs to set $data->{url} to URL of the challenge which has been set up
+# can set other $data keys needed by teardown sub