Don't try to switch from plymouth to GDM before tails-reconfigure-fontconfig.service and update-ca-certificates.service are finished.

Otherwise, there's an empty black screen for ~30 seconds during this transition.
If the user has to wait for 30 seconds anyway, better display *something*.