If you're using ACME to handle certificate rotation, can't you just configure multiple providers?