Of course, I can do that, but tbh a workaround is not that satisfying.
That's why I hand in a wish/feature request covering DNS validation manual mode. This would require more variables (acme challenge key)
Unfortunately, I am not able to put a decent amount of time into digging into certain dockers (either LE or ZeroSSL) to take care of it.