move cacert install to before install from env