[Bug 1045942] update-ca-certificates needs to be aware about transactional updates