am a5f534df: use frozensets to represent APK cert sets

* commit 'a5f534df07a598f3fc9d353a1a9a0ff6c09cfbc0':
  use frozensets to represent APK cert sets