ca-certificates: Make repeat runs not accumulate dupe certs