Find a way to keep `/etc/ssl/certs/ca-certificate` up-to-date