Make automatic reset of Service SSL Certificates Configurable
When you run upcp any service certificate that doesn't have a common name of the server's hostname is replaced by a self-signed cert for the hostname.
There are occasions when the server administrator wants to have different names in use for different services. This means that one or more certificates are need to have a common name that differs from the hostname. The most common form of this being for mail (exim/dovecot/courier). Currently this is being worked around with postupcp scripts that reinstall the proper certificate and/or setting the certificate files immutable.
As a server administrator, I would like this behavior to be configurable. I prefer it to be on the Manage Service SSL Certificates page, but having an option in Tweak Settings is also acceptable.