GitLab

The private certificate needs to track the salts it uses to encrypt the
metadata key. We need to ensure that storage is updated when
EncryptMetadataKey() is called.

We perform all private certificate operations via certificate manager
methods, never returning a private certificate to the user. The
certificate manager is responsible for internally updating its storage
when necessary.

Fixed: b/166473931, 1121443
Change-Id: I90fd432eed32bb9d0a1437a94c8615d1c816f0c7
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2417550Reviewed-by: James Vecore <vecore@google.com>
Commit-Queue: Josh Nohle <nohle@chromium.org>
Cr-Commit-Position: refs/heads/master@{#808648}