Support all-in-AWS setups, specifically by conditionally auto-validating certs

[douglasnaphas]

If the current account owns a name from the params, create a DnsValidatedCertificate, instead of a cert that waits for the validation records to be manually created.