There's no need to bind mount the full /etc/pki from the host. This file can be generated from /usr.
This is not necessary anymore, because we're generating a grub config ourselves.