don't require sudo for sp, install ca-certificates automatically
install nrpe packages automatically