bzr: depend on ca-certificates.