we don't need bash for cacerts shell scripts