[Compass] Move cacert docker copy after chown in fetch_os_creds