Rather than having Traefik handle cert fetching, instead it is delegated to a separate job so that multiple Traefik instances can share certs