having yum_repository manage the ca-certificates package