This would require a ~$400 wildcard cert, but I'm hoping that [Let's Encrypt](https://letsencrypt.org/) can simplify this substantially.