GitLab

This change uses a special sandbox feature to gain access to the
system's root certificate store.

The previous code referenced the cert store under "/system", but that
directory is not attached to the namespaces of non-"shell" processes.

Bug: 837536
Change-Id: I4a406525558e10dd0cac8e9b28345560899e07dc
Reviewed-on: https://chromium-review.googlesource.com/1032050Reviewed-by: Wez <wez@chromium.org>
Reviewed-by: David Benjamin <davidben@chromium.org>
Commit-Queue: Kevin Marshall <kmarshall@chromium.org>
Cr-Commit-Position: refs/heads/master@{#554820}