The official let's encrypt client will happily not modify your configuration, too. I don't understand why being distributed as a binary is important.