don't run `apt-get update` when generating the status checks output because it is so slow and should be update daily by cron anyway
warn if a SSL cert is expiring in 30 days
make the DNS API a little clearer
DNS API should reject qnames that aren't in a zone managed by the box

see https://discourse.mailinabox.email/t/set-www-a-and-other-dns-records-after-install/63/10