We use payed certificates for some of our clients which we need to upload to Cloudflare for instance.

Currently the way to go is "send an e-mail to support with the a request for right SSL certificate. They'll make it available on the server where we can download via SSH.

This to me is a job which could be automated and authorized too. This saves work for the support employee.

To make it secure we can add authentication.

Steps to follow:
- tech partner/employee (non-owner) requests a ssl certificate (either via web or console for a linked ssl on the current hypernode)
- a magic link is e-mailed to the owner of the domain
- owner clicks the link in the e-mail, logs in (authentication) into my hypernode and authorizes the request

I would opt to only allow this on 2fa enabled accounts.

This also means there is always a registration on actions with the approval of the owner of the domain/hypernode.