acme: better idempotence

The role ACME is showing changes have been made even if no change has been applied to the configuration. This is due to the fact that all config files are removed and re-created to achieve idempotence. Instead, it should figure out what files to remove.