Add ability to strace a chef-client run.
Reinstall ca-certificates if needed.