grr GodaddyDNS doesn't allow API access anymore unless you reg >10 domains with them.... (LetEncrypt auto validation barrier for me now)

You have a NetScaler that you can use? Putnam a glue record and use NetScaler ADNS to resolve your domains for LetsEncrypt. Can help you with that, tooling-wise :-)