Move mozroot certificate update to before mono install