Comment by rocqua

Using http renewal requires listening on port 80 which, by default, requires root.