certbot: add a cli.ini file with (commented out) ecdsa certs
    
    Once this becomes useful we should switch the letsencrypt certs we get.
    Right now it's not, as the intermediate is the letsencrypt R3, which is
    a rsa 2048 bit, so it doesn't help the FUTURE case. Someday they will
    switch this to use the X1 cert which will be ECC and it will be useful
    to switch.
    
    Signed-off-by: Kevin Fenzi <kevin@scrye.com>