chromium: add ca-certificates to be able to download nacl.