use a newer upstream version that understands a custom prefix
use the release tar.gz for tlsdate stable