Default to only provisioning certificates for the hostname (not www.<hostname> also)
This is especially important when Site.js is used for testing purposes with a service like ngrok. There is no reason why anyone should have to create a www endpoint in addition to the one they’re using.
This leads to silly situations like having a dev.ar.al as well as a www.dev.ar.al domain mapped to your local development machine just to keep Site.js happy.
Suggested implementation
Remove the default alias for www..