The `InstallCACerts` step is really a hack for platforms that don't have decent ca-certs bundle support, like windows, osx, solaris, etc. I think we want to keep that in the `git` directory so that we continue to validate that our AIO package has the correct bundled cacerts, e.g. for PMT.