update the ca-certificates only if $CA_CERTIFICATES_PATH exists