diff --git a/hl-base-env.install b/hl-base-env.install
index b1bf814..4ef1e03 100644
--- a/hl-base-env.install
+++ b/hl-base-env.install
@@ -1,14 +1,16 @@
 _keyuid='Yi-Ting Shih Packaging Infrastructure <ytshih@konchin.com>'
 
 _package_changed() {
-  trust anchor --store /usr/share/hl-base-env/hl-rootca.crt
+  /usr/lib/hl-base-env/install.sh
+
   pacman-key --add /usr/share/hl-base-env/hl-package.pem && \
     pacman-key --lsign-key "$_keyuid"
+
+  trust anchor --store /usr/share/hl-base-env/hl-rootca.crt
   update-ca-trust
 }
 
 post_install() {
-  /usr/lib/hl-base-env/install.sh
   _package_changed
 
   systemctl preset systemd-networkd.service