ca-certificates: set wrksrc correctly.