CAA record blocked my Let's Encrypt cert

Added a CAA record naming one CA, then couldn't issue a Let's Encrypt cert because I'd forgotten to authorise letsencrypt.org. That's arguably my mistake but the panel could warn that a CAA record will restrict issuance to only the CAs listed.