Filter production CA specs from coverage on Travis

If we're running on Travis, we don't have production certificates and such, so
those specs should be skipped. This results in an apparent coverage drop when
those pending specs are skipped, so filter them from coverage.