ACME has a concept of EAB (external account binding) credentials, basically like an API key. https://zerossl.com/documentation/acme/ Caddy supports this, so what you want to do should be covered.