Then you have to distribute the keys from the validation server to server-a and server-b for their ACME client?