Install the update-ca-certificates hook script in Ubuntu package

[rrthomas]

Rather than instruct the user how to install it manually, install it as part of the package.