[opensuse] updating system CA to include recent changes: how?