RHEL repo certificates may be readonly-root; work around with sudo

This means the build will sudo, which could cause problems for automation
if the build user doesn't have passwordless sudo set up.  We do, at
the moment, but other users may want to beware.

Signed-off-by: Dan Mick <dan.mick@inktank.com>