am 4a84a13e: am a5f534df: use frozensets to represent APK cert sets

* commit '4a84a13e7ce65f24bcadb8d331023b6415d7867e':
  use frozensets to represent APK cert sets