Detect invalid NS entries

[EpicEric]

There could be an option where Agnos detects whether the provided domains actually point to itself, by handling its own set of DNS challenges. This would help with debugging and help avoid reaching Let's Encrypt's rate-limits.