This makes sure that the Debian-Edu_rootCA.crt file gets installed as trusted
certificate at first launch of firefox-esr and thunderbird. The policy is valid
for both firefox-esr and thunderbird as of version 68.2.x (thunderbird still
needs to migrate to bullseye, tested with sid version).

Signed-off-by: Wolfgang Schweer <wschweer@arcor.de>