`option PackageInit` should check for `etc/ssl/cert.pem` and copy the one from the host, if there is none.