How to generate DNS-01 keyAuthorization

I’m not sure that the DNS-01 capability is there yet - see On the state of the dns-01 challenge

I’m sure if you’re willing to help test / debug though it would be appreciated.