don't restart ACME service each time role is applied

With 10+ certificates managed by this collection, applying small modifications (such as credentials update) becomes hellish as each certificate service is started in foreground.