It was meant to re-create /etc/ssl/certs/java/cacerts at boot time since we used
to remove it at build time to make the build deterministic. We don't ship
ca-certificates-java anymore, so we don't delete /etc/ssl/certs/java/cacerts
anymore, so we don't need to re-create it.