When using the uri module in a base job it cannot validate ssl certs
unless you add the ca certificate paths to (un)trusted-ro-paths. This
seems a common use case so it makes sense to mount them into the bwrap
context by default if they are existing.
Change-Id: I2277374cdb8455dd9e39222ef0ecbab4c8ac786e