mercurial: depend on ca-certificates for https.