In order to be able to use the unixd service with the `verify_ca` and `verify_hostnames` set to `true` it needs to be able to read the certificate store. This change bind mounts the cacert paths for the unixd service.