[upgrade] Exclude /etc/ssl/certs/

Because HAproxy certificated are stored in /etc/ssl/certs/, we have to
ensure they are not deleted after the upgrade.