I've rewritten and cleaned up dehydrated-bigip significantly.
New features/hook scripts added:
- DNS-01 based validation
- Deployment of BIG-IP web management interface certificates (still using 100% iControl REST API mind you!)
- Re-deployment hooks
I've also added examples for how I use lexicon and nsupdate for DNS-01 based challenge deployment and cleanup.