Just in case, we'd better make sure that certbot is installed and usable (+x) before we try running it.