move plugins out that depend on xorg stuff, and add java-cacerts dependency. fixes #5132. (cherry picked from commit 151f353f)