Make ca-certificates a hard requirement

Needed to access key info service.
Drop build dependency on Python

Was only needed for a unit test, but it now just skips the test if
Python is missing.