- name: 'update trusted ca'
  shell: '/usr/sbin/update-ca-certificates'