Changed the path where PGP keyserver CAs are downloaded

Noticed that update-ca-certificates will add all *.crt files found under
/usr/local/share/ca-certificates to the list of globally trusted CAs.

So this is not a safe place to download these kind of "special use" CAs,
even though the file extension wouldn't be .crt.