update-ca-certificates not run after playbook fails

[inghamn]

When a playbook or role errors out, any handlers notified during that run are forgotten. However, subsequent runs of the same playbook or role will not re-notify the handler.

On a given run, the cert is correctly copied to the host. Then, later on during that run, there's an error in the role, and it fails out. Subsequent runs of the playbook will not, then, notify the handler, since the presence of the correct cert file means it shouldn't re-notify.