/anaconda/reinstall needs to ensure the internal CA certificate is present after system reinstallation in order for the subsequent tasks to get fetched properly.

It should be implemented as a kickstart %post script snippet.