semi-related question: where is the letsencrypt workalike for s/mime?