use `ubuntu/trusty32` box which is not hosted on S3 and thus does not need the specific cacerts bundle