add path to update-ca-certificates exec