devops: unmask wkhtmltopdf