Also refresh ca-global when Debian certs change