stop gallium installing star certs

yes, i somehow overlooked the site.pp call for this until now

Change-Id: Idb0a9126fb34a27b39c74c2afe4e2eada10c9f55
RT: 6594