This also builds binary bit for bit identical binaries compared to
when dbgsym packages are built

It's the responsibility of the build process to ship with
a valid resources/tls/cacerts.txt file.