ca-certificates are covered by abstractions/ssl_certs already