build_chroot_jail: square up certs as well so you can download things