ca-certificates-java: downloads dependencies from internets, so not free in kiin terms
gtk-vnc: build without pulseaudio