stabilize ca-certificates, should fix stable stage builds