The basic question is this: if I use wildcard certificates and used the dns challenge and manually set things up, does this mean I have to setup all dns challenges again manually at each renewal interval when the registrar has no api? Is this not a once in a lifetime exercise but has to be done with every renewal?