Make sure "ca-certificates" package is installed on Debian

Minimal Debian builds do not include CA certificates and thus downloading the omnibus installer with https fails.

But as more often than not, here is also a bit of a refactoring. No extra charge.