Specify run order for paxctld and don't install recommends for Libreo…

…ffice

Setting the paxctld in the requires block of the libreoffice install will ensure the service is always started prior to installing the package.
ca-certificates-java was posing some issues at install time. As it is listed in "recommends" and not "requires", we can sidestep the issue and also reduce total amount of packages installed.

dom0/sd-svs-disp-files.sls

@@ -31,3 +31,6 @@ sd-svs-disp-install-libreoffice:
     - retry:
         attempts: 3
         interval: 60
+    - install_recommends: False
+    - require:
+      - service: paxctld