This is not quite "ca-cacert" anymore, more like "ca-sysmocom" for the root certificates needed for us. Fixes: SYS#2499