I hadn't heard of Agnos before, interesting alternative to ACME-DNS. Looking at the README, is the idea that the certificates get generated on the DNS server i

I hadn't heard of Agnos before, interesting alternative to ACME-DNS. Looking at the README, is the idea that the certificates get generated on the DNS server itself? Not by the ACME client on each machine that needs a certificate? That seems like a confusing design choice to me. How do you get the certificate back to the web server that actually needs it? Or is the idea that you'd have a single server which acts as both the DNS server and the web server?