Acme-chief has a ton of overhead -- setting it up in a new project requires additional VMs, and solves problems that cloud-vps mostly doesn't care about.
Let's set up a different puppet solution for automating LE certs within cloud-vps. Let's pick a LE client that's easily installable on our hosts (ideally already packaged/maintained for Debian) and write some puppet classes that can be run locally to request and install a cert.
We'll still need a per-project LE account and a designate service user.